GitHub

A custom YAML tag for referencing environment variables in YAML files.

To enable the tag, pass your loader of choice into the add_env_tag function, which will return the loader with the construstor added to it. If the variable specified is not set, then a null value is ...
Developer Tech

Socket: PyPI and npm payment SDK malware compromises CI/CD

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...
SecurityWeek

Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations

Rogue Agent, a vulnerability in Google Cloud Dialogflow CX, allowed attackers to control agents and exfiltrate sensitive data.
The Hacker News

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

Google fixed Rogue Agent, a Dialogflow CX Code Blocks flaw that could let one writable agent affect every chatbot in a Cloud ...
Windows Report

Malicious PyPI Packages Let Hackers Control Telegram Bot Servers

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...
GitHub

The command-line tool that gives easy access to all of the capabilities of B2 Cloud Storage.

This program provides command-line access to the B2 service. b2 account Account management subcommands. b2 bucket Bucket management subcommands. b2 file File management subcommands. b2 ...