The Hacker News

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
GitHub

SubprocessCLITransport.close() hangs indefinitely if subprocess shutdown handler blocks

SubprocessCLITransport.close() in the Python claude-agent-sdk sends SIGTERM to the Claude Code subprocess, then calls await self._process.wait() with no timeout. If the Claude Code Node.js process ...
GitHub

claude_code_subprocess_driver.py

- Agent busy: new messages ignored by CC, driver queues them ...
Bleeping Computer

Microsoft shares fix for Windows C: drive access issues on Samsung PCs

Microsoft has shared guidance to fix C:\ drive access issues and app failures on some Samsung laptops running Windows 11, versions 25H2 and 24H2. This comes after a joint investigation with Samsung ...