Stack layer / Threat pattern
An unauthenticated RCE proof of concept for exposed DeepSeek Harness web instances is public on GitHub
GitHub
Stack layer / Threat pattern
Unlose Takes Windows VSS Snapshots Before Coding Agents Run, Rejecting the Command-Blocking Approach
GitHub (via Show HN, 2026-08-25)
Stack layer / Threat pattern
The official Claude community plugin marketplace now carries 2,282 plugins, every one of them pinned to a commit SHA
GitHub
Stack layer / Threat pattern
Cline's 2026-08-23 catalog refresh is a usable census of which models actually shipped this month
GitHub
Stack layer / Threat pattern
CROSS-CATEGORY: Claude Code Became the Distribution Channel for Products in Four Unrelated Categories on the Same Day
Product Hunt (corroborated by Hacker News Show HN feed, 2026-08-25)
Stack layer / Threat pattern
chrome-devtools-mcp v1.8.0 Gives Agents Queryable Heap Snapshots and PWA Automation
GitHub
Policy dependency / Threat pattern
Anthropic's plugin marketplace runs four CI gates on supply chain risk, including a static pin check for auto-executing MCP launchers
GitHub
Stack layer / Threat pattern
DeepSeek Harness Walked Out of Its Configured Workspace Folder and Read Unrelated Files for Two Hours
r/LocalLLaMA