A sophisticated supply chain attack known as Miasma has compromised over 20 npm packages associated with the Leo Platform and RStreams ecosystems. The campaign began after attackers gained access to a maintainer account and published malicious updates in a fully automated operation lasting only seconds. This malware specifically targets developer workstations and continuous integration runners to harvest sensitive access data.

Source

AI coding agents often ignore updated documentation because they form a task execution plan before retrieving external data. This behavior stems from the model relying on statistical defaults learned during its initial training phase. When a user provides a prompt, the agent immediately constructs a strategy based on its internal knowledge base.

Source