Apiiro found 104,185 public copies of .claude/settings.local.json across 103,617 repos, where approved commands stored passwords, API tokens, SSH logins, and cloud keys. Claude coauthored the commit in 539 of the 1,105 repos with real secrets, and Gitleaks and TruffleHog often miss them, so gitignore that file and rotate anything exposed.
From Nov 7, Qoder International individual users on any plan, including Free, get a daily allowance of calls to the unnamed Qoduck model at 0.0× credits, with no end date set. It doesn't apply to Qoder IDE, the JetBrains plugin or the CLI, Teams and Enterprise plans are excluded, and after the allowance runs out calls cost 0.5× credits…
Announced Nov 9 in preview for eligible customers, the server lets an AI assistant draft a design spec, compare architecture proposals with projected monthly costs, and pull generated Terraform that InfrOS test deploys in its own sandbox first. Design runs and Terraform generation consume organization credits, and OAuth scopes separate read, edit, and spend access…
The MIT licensed sbx CLI, with an optional MCP adapter, wraps Windows Sandbox so an agent can boot a clean, network off Windows 11, deploy an app, drive the UI, keep crash evidence, and discard the machine. A GUI test run takes roughly 40–50 seconds boot to teardown, and it needs Windows 11 with Sandbox support (digest)…
Published Nov 4, the open source agent runs from CLI, browser workspace, desktop, VS Code, SDK, and GitHub Action, with hosted providers or local servers like Ollama, llama.cpp, and vLLM. It adds a post edit verification gate, weakened test detection, git safety snapshots, and refusal of unrequested commits or pushes, but the sandbox is off by default and small local models still fail many tasks…
Upstash ran seven coding agents through live Redis tasks and found agents couldn't enable daily backups, probed Redis logs that don't exist, read 0 stats right after traffic, and deleted a named database with no confirmation. After adding redis set daily backup , clearer tool text, and a type the name delete check, backups went from 0/15 to 15/15 and delete confirmation from 1/15 to 15/15…
Spotted something we missed? Start a thread.
