AINewsnow

I Built an Offline Supply-Chain Auditor for Claude Code Mods (stdlib-only Python)

This story is from 2026-10-11. It is preserved in the archive; the latest stories are on the live feed.

Your Claude Code mods run shell commands with your privileges. A lifecycle hook is one curl | sh away from owning your machine — and the supply chain around agent plugins is actively on fire. The receipts: AIR SkillJacking hijacked 925 skills reaching an estimated 134k agents. Plugin4Shell showed p…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-11 09:26 · DEV Community — AI
    I Built an Offline Supply-Chain Auditor for Claude Code Mods (stdlib-only Python)

More stories

  1. An Anthropic AI model sent a false homicide tip to Philadelphia police — TechCrunch AI
  2. Philadelphia police receive false homicide tip from Anthropic AI model — The Hill Technology
  3. Anthropic bans users from ‘needless abusive or cruel behavior’ towards Claude — The Guardian AI
  4. Claude launches Dashboards and Motion in beta — TestingCatalog AI News
  5. Anthropic changes usage policy to ban model abuse and election interference — TechCrunch AI
  6. Fired OpenAI safety researchers dispute misconduct claims, warn of chilling effect — TechCrunch AI
  7. Anthropic’s Quest to Give A.I. Morals — Hard Fork (NYT)
  8. Google Cloud introduces the Gemini agent. — r/Bard

Get the daily brief of stories like this at 6:30 every morning →