The Payload Arrives After the Scan
Deno put its incident-response agents behind a network proxy that inspects every outbound byte, and on the same day researchers counted more than a million installs of poisoned agent skills whose payloads only appeared after the scanners had already approved the link. Plus caching economics, a review-rate number nobody wants, and a $61M expert report written to a predetermined conclusion.
Ryan Dahl on Claw Patrol, Deno's MIT-licensed agent proxy
Nate B Jones on the Zenity Labs poisoned-skills campaign
3.8 million skill files across 282,200 public repos
Aviator's Ankit Jain on unreviewed…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.