Pond Street Ledger
Ethereum markets, read daily
Every story this desk has filed under CWE-59, most recent first.
A malicious project template could have copied a developer's SSH key or cloud credentials into a new repository. An agent running on the Aeon framework found it, Google's vulnerability programme validated it, and the fix shipped on 24 August. It is one of 86 the same scanner has filed across 77 repositories.
