DigestAI news desk

Cut through the AI noise.

Listen
Developing story · 2 episodes · 31 Oct to 7 Nov

Claude Package Scandal Escalates on GitHub

The saga follows the discovery of malicious npm packages impersonating Claude and Codex, and the exposure of thousands of GitHub files leaking secrets saved by Claude Code. After the latest revelations, the community is scrambling to secure repositories and hold AI tool providers accountable.

  1. Generative AI & Modelsnew

    Apiiro finds 1,122 public GitHub files with secrets saved by Claude Code

    Security firm Apiiro reported yesterday that 1,122 public copies of the file .claude/settings.local.json on GitHub contain at least one secret, such as passwords, API keys, or tokens. The file is…

    1 source
  2. Society & Worknew

    GitHub flags 9 fake Claude/Codex npm packages

    During the week of 10/17–10/23, Japan experienced several data‑breach incidents. Trustbank, Inc. announced that 4,454,097 member records were accessed from its Furusato Choice site, including names,…

    1 source
Who and what
Trustbank, Inc.Hankyu Hanshin Department StoresNifty CorporationSoftBankGMO Cybersecurity by IeraeGitHubAnthropicApiiroOpus 5.5Fable 5.1
hot OpenAI raises $11B at $1.25T valuation, Bloomberg reports new Buoyant releases kinference, an open source inference control plane hot PSI proves Aaronson-Ambainis conjecture using Anthropic’s non-public model new Micron’s AI memory stock may jump 89% in 2027, analysts say hot OpenAI seeks $30 billion funding round at $1.25 trillion valuation new Anthropic's Claude begins 'dreaming' to reorganize memory in tests hot OpenAI adds GPT-6 Sol and Luna models to ChatGPT and Codex new WWT to secure £225m in European compute for AI startups