A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
A single-author repo of instruction files, not code, Ponytail passed 44,000 GitHub stars in nine days by making coding agents ...