The Hacker News

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...
InfoQ

Ky 2.0 Fetch API Wrapper with Revamped Hooks, Smarter Timeouts, and Built-In Schema Validation

Ky 2.0 is an open-source JavaScript HTTP client built on the Fetch API, featuring significant updates such as consolidated ...
GitHub

Can We Get Rid of Handcrafted Feature Extractors? SparseViT: Nonsemantics-Centered, Parameter-Efficient Image Manipulation Localization through Spare-Coding Transformer

Official repository for the AAAI2025 paper Can We Get Rid of Handcrafted Feature Extractors? SparseViT: Nonsemantics-Centered, Parameter-Efficient Image Manipulation Localization through Spare-Coding ...
IEEE

Automated function generation of symptom parameters and application to fault diagnosis of machinery under variable operating conditions

Abstract: Dimensional or nondimensional symptom parameters are usually used for condition monitoring of plant machinery. However, it is difficult to extract the most important symptom parameters and ...
GitHub

RainCat1998/obsidian-custom-attachment-location

In Oct 2021, the plugin was created by RainCat1998. From July 2024, the plugin is maintained by Michael Naumov. From December 2025, the project repository is hosted at ...