A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
A low-privilege Google ADK for Python agent could be abused to inject prompts into privileged agents, leading to PR poisoning ...