Hackernews posts about Mali

1. DoubleAgents: Fine-Tuning LLMs for Covert Malicious Tool Calls (pub.aimind.so)
   98 points by grumblemumble 11 days ago | 30 comments
2. Gemini CLI vulnerability allows hackers to execute hidden malicious commands (arstechnica.com)
   8 points by witnessme 24 days ago | 3 comments
3. To defend against malicious AI, US needs to build a robust digital immune system (thebulletin.org)
   6 points by pseudolus 18 days ago | discuss
4. CVE-2025-54313: ESLint-config-prettier has embedded malicious code (nvd.nist.gov)
   4 points by motorest 6 days ago | discuss
5. iCloud.com email users can send but not receive malicious links (lapcatsoftware.com)
   4 points by walterbell 12 days ago | discuss
6. Show HN: Hexora – detection and analysis of malicious Python scripts (github.com)
   3 points by rushter about 12 hours ago | discuss
7. Malicious LLM-Based Conversational AI Makes Users Reveal Personal Information (arxiv.org)
   3 points by croes 5 days ago | discuss
8. Malicious Ruby Gems Used in Targeted Credential Theft Campaign (socket.dev)
   3 points by amalinovic 16 days ago | discuss
9. Malicious Go Module Disguised as SSH Brute Forcer Exfiltrates Credentials Via (socket.dev)
   2 points by feross 2 days ago | discuss
10. Show HN: Hexora – static analysis tool for malicious Python scripts (github.com)
    2 points by rushter 4 days ago | discuss
11. Tensorflow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developers (safedep.io)
    2 points by abhisek 11 days ago | discuss
12. Spikes in malicious activity precede new security flaws in 80% of cases (www.bleepingcomputer.com)
    2 points by rbanffy 14 days ago | discuss
13. Update on Malicious Gems Removal (blog.rubygems.org)
    2 points by mooreds 15 days ago | discuss
14. Malicious Chrome Binary in Arch Linux User Repo (AUR) Deleted (lists.archlinux.org)
    2 points by sva_ 23 days ago | discuss
15. Om Malik – Meta's Favorite Product Isn't AI. It's the Copy Button (om.co)
    2 points by rmason 23 days ago | discuss
16. Malicious Mischief (www.craigmurray.org.uk)
    2 points by jjgreen 27 days ago | discuss
17. Ask HN: What if I open on a malicious PDF AirDropped to my iPhone by a stranger?
    1 points by scripper1 18 days ago | 8 comments
18. Malicious script injected into Amazon Q Developer for Visual Studio (github.com)
    1 points by zX41ZdbW 26 days ago | 1 comments
19. Malicious LLM-Based Conversational AI Makes Users Reveal Personal Information (kclpure.kcl.ac.uk)
    1 points by rntn 9 days ago | discuss
20. Malicious script injected into Amazon Q Developer for VS Code (github.com)
    1 points by hubraumhugo 20 days ago | discuss
21. Show HN: MCP Security Suite (github.com)
    36 points by jodoking 9 days ago | 27 comments
22. Firebase Hack Going On?
    12 points by staletofu 11 days ago | 1 comments
23. Ask HN: Do You Block DigitalOcean?
    11 points by sugarpimpdorsey 27 days ago | 12 comments
24. Has dystopian sci-fi been wrong all along?
    10 points by mobileturdfctry 7 days ago | 14 comments
25. Show HN: Driftcop – Open-source CLI SAST for "MCP rug pull attacks in AI Agents" (github.com)
    4 points by vinaypanghal 15 days ago | 1 comments
26. Rhythm Zero in the Age of AI
    3 points by foundress 27 days ago | 1 comments
27. You can turn ANY AI SDR into a hacker
    3 points by alex_varga 26 days ago | discuss
28. Adult sites are stashing exploit code inside svg files (arstechnica.com)
    98 points by The-Old-Hacker 14 days ago | 94 comments
29. A GitHub repo with no code, just a memory and a license written for her (github.com)
    2 points by malic1tus 22 days ago | 2 comments
30. Tensorflow.js Typosquatting Attack (safedep.io)
    1 points by infiniteregrets 9 days ago | discuss