Dossier
open source projects
Coverage of open source projects in the Nexus archive.
- Millions of AI agents imperiled by critical vulnerability in open source package
A critical vulnerability in the Starlette open-source framework, used by millions of AI agents and tools, allows hackers to breach servers and steal sensitive data. Starlette, with 325 million weekly downloads, underpins frameworks like FastAPI and enables access to external systems via the Model Context Protocol (MCP), making stolen credentials highly valuable.
- Microsoft suspends dev accounts for high-profile open source projects
Microsoft has suspended developer accounts for several high-profile open-source projects. The move has raised concerns about the impact on these projects' development and collaboration.