Analysis

PhantomRaven: the npm campaign that hid malware behind remote dependencies

A technical reconstruction of PhantomRaven, the npm supply-chain campaign that combined plausible package names, remote URL dependencies and install-time execution, with separate evidence for slopsquatting and likely LLM-assisted malware development.

The 180 ms Ethereum detector starts after the trace exists

DG-VDT reports strong zero-shot results for classifying three Ethereum vulnerability types from EVM execution traces, but the headline latency measures model inference after trace generation, not end-to-end auditing. The strongest result is promising benchmark evidence rather than an independently reproduced production capability.

The attack surface after the prompt: when agent state becomes authority

Long-running agents inherit state. The security question is who wrote that state, why the next agent trusts it, and whether shared memory can silently become an instruction channel.

By DiggingBeagle

The first AI loss-of-control problem is authority, not superintelligence

Recent agent incidents make the near-term control problem concrete: permissions, egress, supervision, dependency and incident accountability are already under strain, even though the strongest futurist loss-of-control scenario remains unobserved.