Arrayref compromise executed payloads during Cargo builds
Summary Removed Arrayref 0.3.10 pulled a typosquatted dependency whose build script downloaded and launched a remote binary.
The details
Arrayref 0.3.10 added non-optional proc-macro1; Cargo built it despite Arrayref's macro source not using it.
Safedep reports proc-macro1 1.0.107 was a renamed proc-macro2 copy with a build script fetching an architecture-specific executable and starting it detached.
The Rust project removed the malicious versions from crates.io; the incident report identifies Arrayref 0.3.10 and proc-macro1 1.0.107.
Reasoning effort supports low, medium, high by default, and xhigh; xAI also made Grok 4.6 available in Cursor, Grok Build, OpenRouter, Vercel, and Cloudflare.
Summary The platform scans agents, skills, MCP deployments, AI infrastructure, and jailbreak exposure.
The details
AI-Infra-Guard provides Agent Scan, Skills Scan, MCP scan, AI Infra scan, and LLM jailbreak evaluation.
The repository includes research artifacts titled Arsenal-BHEU2025-AI-Infra-Guard.pdf and BHEU-25-MCP-Unchained-Compromising-The-AI-Agent-Ecosystem-Via-Its-Universal-Connector.pdf.
GitHub Trending reported 435 stars today; the repository had 5,255 total stars in the supplied snapshot.
The supplied metadata identifies the project as Python and tags it for agent security, AI red teaming, and LLM evaluation.
Summary The AGPLv3 context database exposes memories, resources, and skills through a tiered virtual filesystem for AI agents.
The details
OpenViking stores context under viking:// URIs and processes entries into L0 abstracts, L1 overviews, and L2 full details loaded on demand.
Retrieval first identifies a high-scoring directory via vector search, then recursively explores surrounding context while preserving the browsing trajectory.
OpenViking 0.3.22 reports, across three integrations versus native-memory baselines: 80–83% LoCoMo accuracy, 34.3–91.0% lower input tokens, and 58.45–66.10% lower query latency.
On tau2-bench, experience memory reportedly improved task success by 6.87 percentage points in retail and 11.87 points in airline over the same LLM without memory.
Summary PostHog combines product telemetry with AI observability for self-driving workflows.
The details
The repository presents AI observability, analytics, session replay, feature flags, experiments, error tracking, and logs as its developer-tool surface.
PostHog says these signals give agents context to diagnose problems, uncover opportunities, and ship fixes.
The supplied snapshot lists 334 GitHub Trending stars today, 38,189 total stars, and Slack, web, desktop, and MCP control surfaces.
Munder Difflin turns coding CLIs into local agent office
Summary Open-source desktop harness coordinates coding agents with local memory, messaging, approvals, and optional isolated worktrees.
The details
Each agent runs as a real pseudo-terminal process rendered through xterm.js, with its own working directory and provider lifecycle.
A central GOD agent routes work, adjudicates requests, and sends spending, destructive-operation, and scope-change escalations to a human approvals queue.
Coordination combines per-agent memory, atomic-file mailboxes, a shared blackboard, an append-only event log, and a single-committer Git design.
The repository recorded 344 GitHub Trending stars today and 3,322 total stars in the supplied snapshot.