Supply Chain - PRO-IT Rocks!

Security

Claude Code is spying on someone through an apostrophe. Probably not you. It watches anyway.

A teardown of the Claude Code client found a function that edits the punctuation in your system prompt. The apostrophe in Today's turns into a four-state label the moment you point the tool at your own endpoint. Here is how it works and how to check your own.

Security

I keep my code on a box in my house. Ten thousand trojan repos on GitHub just made that look less paranoid.

A researcher just found 10,000 GitHub repos serving Trojan malware, cloned from real projects and wearing their real commit history as a disguise. Why 'it's on GitHub' stopped meaning 'it's fine', why vigilance is the wrong fix, and why my code lives on a box in my office.