Previously harmless Google API keys now expose Gemini AI data

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...
Microsoft

Developer-targeting campaign using malicious Next.js repositories

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
InfoWorld

Abandoned project linking Java, JavaScript makes a comeback

The Detroit project envisioned using JavaScript as an extension language for Java applications. Now it’s being revived with ...

Alchemy introduces autonomous payment rails for AI agents on Base

Alchemy unveiled a system enabling AI agents to autonomously pay for and access blockchain data using USDC on Base, as agent adoption expands across crypto platforms.
The Hacker News

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...
News 13

NASA to review Artemis II test data as it eyes March launch

KENNEDY SPACE CENTER — During a press conference on Tuesday afternoon, NASA officials said that due to a liquid hydrogen leak and other issues, they will be postponing the crewed Artemis II launch to ...