I tested my security scanner on 480 real vulnerabilities. It pointed at 5% of them.

I maintain vetcode , an open-source security check for AI coding agents. Its main job is malware: it looks at a package before Claude Code installs it, and at a repository right after it is cloned. On that job it has numbers I trust. On the same 1,000 malicious and 1,000 clean npm packages it catch…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

1. 2026-11-12 09:20 · DEV Community — AI
   I tested my security scanner on 480 real vulnerabilities. It pointed at 5% of them.