A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized ...
Vercel has unveiled a new product called Skills, positioning it as a shared marketplace of reusable capabilities for AI coding assistants and framing it internally as an “npm for AI agents”. The ...