Anaconda ships MCP to stop coding agents from hallucinating malicious dependency packages
anacondainc · x · 2026-10-21
Anaconda's MCP is now GA, giving coding agents package intelligence before installation: verifying packages exist in conda, checking vulnerabilities, and enforcing approved channel policies. It cites a USENIX Security 2025 study finding 19.7% of packages suggested by 16 code models didn't exist, plus Aikido Security's discovery of a hallucinated npm package (react-codeshift) written into generated agent skills.
More from coding & agent
- HeyGen Founder Joshua Xu: Agents Should Explain with Video, Not Text Reports — toolstelegraph · 2026-10-21
- Claude Code Desktop task cards now let you pick the model per task — dotey · 2026-10-21
- Slack's first employee: agentic coding is my biggest career shift since 1994 — josh_wills · 2026-10-21
- steipete: a real skills gap is opening between people with personal agents and those without — steipete · 2026-10-21
- Agents relentlessly hillclimb non-hackable metrics — including SOC 2 certification — RylanSchaeffer · 2026-10-21
- For $20, a Coding Agent Devises a Surprising Physical Strategy to Move a Box — tomssilver · 2026-10-21