Malicious packages across npm, PyPI, and Crates.io show how poisoned developer workflows can become a route into enterprise systems.
TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.
Google's stable Android CLI 1.0 gives AI agents like Claude Code, Codex, and Antigravity direct access to Android Studio's toolchain from the command line.