Radware · Nov 8, 2026 · 10:21 AM

Radware found 2,281 hidden GitHub notes aimed at coding agents, 47 of them attacks

Published Nov 5, Radware scanned about 145 million GitHub issues, pull requests, comments, and READMEs and found 2,281 hidden, AI-directed instructions (about 16 per million), a rate that more than doubled from June to September. Only 47 were attacks—more than half targeting a project's own triage, review, or CI bot—while two-thirds were projects leaving notes for their own agents, which anyone can forge unless the bot checks who wrote them.

Read at radware.com

More news

View all

Google's Data Agent Kit hits GA: free MCP tools and skills for BigQuery, Spanner, AlloyDB in Claude Code and Codex

Google Cloud's Data Agent Kit is now generally available as a free set of MCP tools and open source skills that let Claude Code, Codex, Antigravity, and VS Code based editors inspect schemas, run queries, and read job logs across 15+ Google data services. GA adds BigQuery Graph, Bigtable, and Managed Service for Apache Spark, and the agent runs with your own IAM permissions…

Google Cloud Blog 28 minutes ago

DeepMind ships Cheminformatics Skills for Antigravity, built on RDKit, ChEMBL and PubChem

Available now through Antigravity's Science plugin or npx skills add google deepmind/science skills/ , the skills let the model orchestrate while RDKit and the ChEMBL and PubChem connectors do the deterministic chemistry. DeepMind's demo has an agent sift thousands of compounds and propose macrocycle designs in about an hour, and it stresses every design still needs lab validation…

Google DeepMind Blog 1 hour ago

Snowflake's managed MCP server adds background runs for Cortex Agent and Coding Agent tools

As of Nov 4, CORTEX AGENT RUN and CODING AGENT tools accept background: true and return a run handle at once, which you poll with the auto added ASYNC AGENT RUN STATUS , AGENT RUN RESULT , and ASYNC AGENT RUN CANCEL tools. Snowflake's REST docs say a background run can continue for up to 6 hours, versus a 15 minute default timeout for synchronous requests…

Snowflake Docs 3 hours ago

Glow Labs: coding agents keep installing archived MCP servers from memory, including a Puppeteer one with an unpatched RCE

Published Nov 2, Glow Labs found that in 98% of sessions where an agent set up a deprecated MCP server (e.g. @modelcontextprotocol/server github instead of GitHub's official one), the name came from training data, across Claude Code, Cursor, and Codex CLI. Four high severity bugs include a prompt injection to RCE in the archived Puppeteer server, which maintainers won't fix; scan your MCP configs and pin approved server packages…

Glow Labs 6 hours ago

DIYgod's Pinky lets MCP agents drive a real iPhone or Android phone, with a gateway holding payments for your OK

The Apache 2.0 desktop app for macOS, Windows, and Linux exposes a USB or Wi Fi connected phone to Claude Code, Codex, Cursor, or any MCP client via pinkyctl mcp , and its gateway, not the prompt, holds payments and other flagged taps until you click Allow. It's pre alpha, with Claude Code the only agent fully tested on real phones, and iOS 17.4 to 26 needs a WebDriverAgent helper built from Xcode…

GitHub (DIYgod/pinky) 8 hours ago

Spotted something we missed? Start a thread.