AI Agent Security: A Hijacked SDK Goes After Agent Keys as Copilot, Bitdefender and Citadel Add Guardrails
A hijacked release of the tensorlake npm package stole tokens and AI-tool config files, and booby-trapped the stolen GitHub token so that revoking it wipes the victim's home folder. The same week, GitHub made local sandboxing for Copilot generally available, Bitdefender released a free agent guard for macOS, and Citadel AI opened early access to agent monitoring. LangChain and past.dev shipped agent tooling with access controls built in. What each one confirms.
Latest
No posts to display
Latest on TSN
Free TSN tools: crypto calculator, Flux dashboard and more.