Four vulnerabilities in CrewAI could be chained together via prompt injection for sandbox escape, remote code execution, and ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...

According to Sola Security, a single ChatGPT prompt triggered a mass file retrieval, and none of the company’s monitoring ...

Google releases ADK 1.0 for Java, expanding its framework for AI agents with tools, a plugin system, and agent collaboration.

Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked ...

写在最前面，2月28日通义实验室AgentScope团队发布了自研的独立部署开源桌面Agent工具：CoPawhttps://copaw.agentscope.io/CoPaw是整体架构上类似openclaw的工具，用的agentscope框架搭建， ...