TAG
#credentials
Stories connected through a shared idea, actor, technology or theme.
pnpm adds registry profile and token management commandsThe release adds pnpm profile and pnpm token commands for viewing, creating and revoking registry credentials. It also introduces a files-based store index for network filesystems and faster Python dependency resolution.→cc-switch 1.0.13 updates multi-provider coding-agent routingThe release is distributed through the project’s GitHub release channel and updates the desktop and CLI tooling used to select and manage agent providers. It is part of the project’s 1.0 release line.→Cline Desktop 0.0.27 hardens credentials, provider routing and session recoveryThe release changes expired-login handling, prevents stored credentials from silently restoring after sign-out and adds actionable recovery controls. It also preserves provider-specific protocols for OpenCode Go models and retries with a stable session identity.→n8n adds instance-report log streaming and fixes credential revocationThe release adds core events for streaming logs from instance reports and repairs end-user credential revocation in the editor. The update is published as a pre-release build.→JetBrains confirms Cadence server-backup access in incident updateJetBrains said Cadence, a hosted service for running PyCharm projects on cloud compute, was accessed through a compromised environment. The August 31 update confirmed access to a 2024 Cadence server backup while stating that no additional compromised resources or data had yet been identified.→Claude Code v2.1.238 hardens plugin credentials and self-hosted agent operationsClaude Code 2.1.238 added a headersHelper path for marketplace and MCP requests, with trust-gated execution and no inherited credential environment. It also added self-hosted-runner proxy and shutdown controls, improved Remote Control resilience, and fixed memory growth in long interactive sessions.→Beazley says agentic AI drove a 36% jump in disclosed vulnerabilitiesBeazley Security reported that newly disclosed vulnerabilities rose 36% quarter over quarter in Q2 2026, while confirmed exploitation in the wild rose 10%. Its report attributed the disclosure increase to agentic AI in vulnerability research and said compromised credentials were the initial access vector in 67% of ransomware intrusions it investigated.→ChainDrop targets npm users through developer-tool configurationThe Register reports that ChainDrop poisoned 444 npm packages and can activate through configuration used by environments such as VS Code and Claude Code. The campaign is designed to harvest npm tokens, cloud credentials, and other secrets, while dependency scanning may not detect the configuration-based payload.→