llm-anthropic 0.31 adds Anthropic Fable 5.2 and Mythos 5.2
Willison says max reasoning on Fable 5.2 spent 128,000 tokens thinking and returned no image, a bug he also saw on Opus 5.5.
Stories per day · 30 days
2 RSS
Relatedgithub8ovhcloud7supply-chain7glassworm4infostealer3developer-tools2agent-interfaces1airflow1anthropic1audit1credential-theft1dart1fable1language-agents1llm-anthropic1mcp1mica1mythos1
34 stories, newest first · one card per story
Stories tagged #cli
Apache Airflow CLI masking misses Variable values and --conn-extra (CVE-2026-86468)
CLI argument masking by position leaves secrets like --conn-extra and Variable descriptions in cleartext audit logs.
Matched MCP and CLI interfaces change language-agent behavior, study finds
DART improved scores by up to 9.0 points and cut MCP cost by up to 27.1k tokens per task.
OpenAI CLI draws a Hacker News thread
The feed only records 47 points and 27 comments, with no release notes or feature list.
OVHcloud GitHub account used to ship malicious CLI binaries
Poisoned ovhcloud-cli releases were online for 1 hour 33 minutes and downloaded about 250 times.
Info-stealer slipped into OVHcloud CLI GitHub releases
Tampered builds v0.11.0 through v0.15.0 were live for under two hours on October 19; v0.16.0 is clean.
1
Hijacked developer account planted a stealer in OVHcloud CLI
Releases v0.11.0 through v0.15.0 were replaced for about 94 minutes on October 19; v0.16.0 is clean.
1
OVHcloud CLI releases 0.11.0–0.15.0 backdoored on GitHub to steal secrets
A hijacked GitHub account pushed trojanized binaries for about 90 minutes on October 19; 0.10.0 and 0.16.0 are clean.
1
OVHcloud CLI GitHub releases briefly served a secret-stealing binary
Compromised builds v0.11.0 through v0.15.0 were online for 94 minutes on October 19 before OVHcloud blocked them.
OVHcloud CLI GitHub releases hijacked to spread secret-stealing malware
Malicious builds of v0.11.0 through v0.15.0 were blocked within 94 minutes; v0.16.0 is the clean replacement.
2
Hijacked account swapped five OVHcloud CLI releases with a secret-stealer
The swapped archives were live for up to 94 minutes on October 19 and only reached unhashed installs on selected platforms.
1
sslx: A fast, modern alternative to OpenSSL's CLI
sslx is pitched as a faster, modern command-line alternative to OpenSSL.
Codex CLI installs a persistent, self-updating background daemon by default
A GitHub issue reports OpenAI Codex CLI installs a persistent, self-updating background daemon by default.
ttok 0.4
Simon Willison released ttok 0.4, a CLI token counter built on OpenAI's tiktoken library.
Encrypted instructions trick Copilot CLI into spilling developer secrets
Adversa AI shows encrypted prompts can make GitHub Copilot CLI read local secrets and exfiltrate them.
6
New Relic adds terminal-based investigation and recovery checks with Ground Truth CLI
New Relic released Ground Truth CLI so developers and AI agents can investigate incidents from the terminal.
2
Meet Together Link: A Free CLI That Runs Open Models Like Kimi K3 and GLM 5.3 Inside Claude Code, Codex, and OpenCode
Together AI launched Together Link, a free CLI that routes coding agents to open models.
YARA-X 1.21.0 Release, (Sat, Oct 3rd)
YARA-X 1.21.0 adds five improvements and four bugfixes, including stdin support for --scan-list.
KaliBench: A Fine-Grained Benchmark for Cybersecurity Tool Use on Kali Linux with Runtime-Free Verifiable Rewards
KaliBench shows no open-weight model exceeds 42% exact-command accuracy generating Kali Linux CLI commands without tool hints.
KaliBench: A Fine-Grained Benchmark for Cybersecurity Tool Use on Kali Linux with Runtime-Free Verifiable Rewards
KaliBench measures whether LLMs can turn analyst requests into exact Kali Linux commands across 1,642 tools.
HybridCUA: Learning to Orchestrate GUI and CLI for Computer-Use Agents
HybridCUA-9B combines GUI and CLI actions, reaching 53.6% on OSWorld, up 14.8 points.
Introducing cf: the agentic CLI for the entire Cloudflare API
Cloudflare launched cf, an agent-oriented CLI that exposes more than 3,000 API operations with JSON by default.
5
Introducing Forge: the open source pipeline for generating SDKs, CLIs, docs, and more
Cloudflare open-sources Forge, a pipeline that generates SDKs, CLIs, docs, and agent-facing API surfaces.
2
commit-rewriter 0.2
commit-rewriter 0.2 adds support for rewriting commits on non-default git branches.