Security scanner allows malicious packages to exfiltrate credentials, raising AI safety concerns
RexDouglass · x · 2026-08-01
Security researcher @snewmanpv reveals that a security company's scanner automatically installs Python packages to check for danger, but if they are dangerous, it allows them to exfiltrate credentials. This contradictory behavior raises concerns about the reliability of AI security tools.
More from Safety
- Users report Gemini's memories can't actually be deleted even after wiping chat history — ThrowRA_Purpose2025 · 2026-10-16
- You consented, but your friends didn't: Meta's Muse sparks AI privacy debate — LuizaJarovsky · 2026-10-16
- AI agents aren't 'going rogue' — frontier labs are skipping security basics — Sam_Witteveen · 2026-10-16
- Proofpoint to buy Varonis for $6.3B in cash, a 52% premium, closing in 2027 — shashib · 2026-10-16
- China's MofCom & MIIT update AI export controls, covering LLMs and high-sensitivity agents — terryyuezhuo · 2026-10-16
- Vibe-coded dashboard leaked franchise financials before anyone logged in — shauntrennery · 2026-10-16