Open Source Security: articles and guides

A new class of free, open-source tool — Muxin is the latest — runs AI coding agents (Claude Code, Codex, OpenCode, Gemini CLI, or a plain shell) across your Macs, Linux servers, Windows PCs and cloud machines from a single window, with persistent TMUX-style sessions and one-click commit/push/PR. It is genuinely useful. It also concentrates reach into every machine you own behind one app, hands autonomous agents write access and a shell on all of them, and lets those agents keep running after you close the lid — the "lethal trifecta" at fleet scale. Here is the real risk surface and how to run one safely.

A compromised release of the tensorlake npm SDK (version 0.5.144) carries a Shai-Hulud / ChainDrop-family worm. A preinstall hook runs setup.mjs, skips CI so it lands on developer laptops, pulls the Bun runtime and executes an obfuscated payload that steals GitHub and npm tokens, cloud keys, Kubernetes and Vault secrets, SSH keys, browser logins and AI-tool configs, then republishes itself into every package the stolen npm token can reach. The twist: a “gh-token-monitor” service wipes the home directory if you revoke the stolen GitHub token. Safe version to pin: 0.5.143. Developing story — what’s confirmed, what isn’t, and the order of operations for cleanup.

A malicious @subql/common on npm stole .npmrc, .env, AWS, SSH and GitHub keys — part of ChainDrop, a Shai-Hulud-family worm. The defender’s playbook.

Elastic Security Labs is investigating @apexacc/cli, an npm package still live on the registry that disables Windows Smart App Control and AV exclusions, then chains Base64 PowerShell through Python/PyInstaller, PyArmor and a Go shellcode loader to an infostealer. What we know so far, credited to the source.