Researchers at Endor Labs uncovered 88 new packages tied to new waves of the campaign, which uses remote dynamic dependencies to deliver credential-stealing malware.
OpenAI has launched Codex for Open Source, offering maintainers six months of free ChatGPT Pro and API credits amid a surge of AI-generated pull requests.