AINewsnow

RepoXray – Zero-upload supply-chain, slopsquatting, and MCP secret scanner

Hi, I built RepoXray ( https://github.com/Ra9mirez11/repoxray ) to audit repositories before running npm install or attaching AI coding agents. Why I built it: AI slopsquatting: LLMs regularly hallucinate plausible package names. If a package returns 404 on npm today, an attacker can register it to…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-08 00:55 · DEV Community — AI
    RepoXray – Zero-upload supply-chain, slopsquatting, and MCP secret scanner

More stories

  1. Election backlash against data centers rattles AI stocks and expansion plans — TechCrunch AI
  2. Anthropic strikes $3.4bn deal for gas-fired generators to power AI data centres — Financial Times AI
  3. OpenAI to keep expanding AI data centers despite election results favoring restrictions — DigiTimes Asia
  4. Tencent AI chief warns AI will soon master biology, raising new safety risks — SCMP China Tech
  5. Hydra-PSIE expands 'Coeziune OM–IA' DOI registry to 39 published works — DEV Community — AI
  6. Developer's 48-Hour Field Notes Detail Free-Tier LLM Batch Job Failures — DEV Community — AI
  7. Apple's John Ternus reportedly pushing for faster AI progress beyond Siri upgrades — Techmeme
  8. US AI Safety Center Staff Now Report to White House, Raising Independence Concerns — AP News

Get the daily brief of stories like this at 6:30 every morning →