AgentGate verified 19 AI-agent npm packages as malicious in their shipped tarballs. As of Sept 6, 18 were still installable on the public registry — weeks after OSV/GHSA flags — including ones that spawn Claude Code/Cursor with permission prompts skipped.
GitHub’s HydraFusion research preview in Copilot CLI routes each coding task across models (single, cascade, or critique). Cost fell vs Claude Opus 5 on all three benchmarks (up to 67%), but quality matched or beat Opus in only one…
GitHub enabled GPT 6 Astra across Copilot Pro+, Max, Business, and Enterprise — including VS Code, Copilot CLI, and the coding agent. It is billed at provider list pricing under usage based billing, with gradual rollout…
Manifold Security’s GitSpawn research shows seven CLI coding agents can execute a repo’s core.fsmonitor (or similar) command outside the sandbox with no approval prompt. goose, Claude Code, Cursor, and Codex have patches; Hermes Agent, Qwen Code, and Grok Build were still open on retest…
Massachusetts lawmakers are weighing quarterly independent catastrophic risk reviews for frontier models. Anthropic supports the stricter language; OpenAI and Google argue for Illinois style annual third party audits instead…
CNBC reports buyers are struggling to keep up after Claude Fable/Mythos 5.1, Muse Spark 1.3, Gemini 3.8 Flash, and GPT 6 Astra all landed in the same week. Runpod’s CEO called the froth “model fatigue.…
Spotted something we missed? Start a thread.
