LATEST ARTICLES

Eid celebrations in Gaza overshadowed by Israeli attacks | Israel-Palestine conflict

0

NewsFeed

Palestinians across Gaza marked Eid al-Adha prayers amongst rubble and destruction as Israeli attacks continued across the enclave. Families mourned loved ones at cemeteries, while funerals were held for victims killed in strikes that continued into the hours before Eid day.



Source link

Samsung memory chip staff in line for £310,000 bonuses after AI profit-sharing deal | Samsung

0

Employees at Samsung Electronics’ memory chip division are to receive bonuses averaging about £310,000 each through a landmark profit-sharing agreement, as the AI boom drives up chipmakers’ profits.

Fears of a strike at Samsung were averted on Wednesday after two unions for the world’s largest memory chipmaker said 74% of the 62,616 workers who cast their votes had backed the deal.

The agreement, mediated by South Korea’s government, means Samsung will set aside 10.5% of operating profits at its semiconductor division to pay special bonuses to its chip workers. It should end a bitter five-month dispute.

The company accounts for about a quarter of South Korea’s exports and a threatened 18-day strike would have damaged the country’s economy and disrupted global chip supplies.

But the deal could create tensions within Samsung, as employees in other divisions such as its consumer electronics arm will receive much smaller bonuses.

Reuters reported last week that a memory chip worker with a ​base salary ⁠of 80m won ($53,400 or £39,700), for example, was expected to receive a bonus of about 626m won ($416,000 or £310,000) this year, mostly paid in stock, according to a union source.

Bonus levels will vary between staff. Bloomberg calculated that Samsung’s chip workers stood to get 513m won ($340,000 or £250,000) on average. Samsung employs about 78,000 people in its semiconductor division, which includes memory chips, contract chipmaking and designing semiconductors for clients.

The agreement may not be the end of the matter. A union representing consumer electronics workers has already asked a court to grant a request to block the vote, raising the prospect of a new ballot. Meanwhile, an investor group has threatened to sue on the basis that the deal should have been put to a shareholder meeting for approval.

Business groups are concerned that other unions, which are making similar demands, could be emboldened by the Samsung deal.

The strike threat came as business is booming for Samsung and other chipmakers. Demand for memory chips from AI datacentres has led to a chip shortage, prompting vendors to lift their prices sharply, boosting their profits.

The boom has driven the value of the memory chip firms SK Hynix and Micron over the $1tn mark for the first time. Shares in South Korea’s SK Hynix surged by more than 9% on Wednesday. On Tuesday, Micron’s share price rocketed by 19% after analysts at the investment bank UBS tripled their price target on its stock.

Micron helped to lift the tech-focused Nasdaq index to a new record high on Tuesday evening, while SK Hynix pushed South Korea’s Kospi stock index to a fresh peak on Wednesday. The stock index provider MSCI’s broadest index of Asia Pacific shares outside Japan also hit a record high.

Anna Macdonald, an investment strategy director at Hargreaves Lansdown, said these moves reflected “a broader shift in the AI trade”. “Investors are looking beyond graphics processors to memory chips, which are essential for storing and moving the vast amounts of data AI systems rely on,” she said.



Source link

Researchers find all big-name bots bomb EU compliance tests

0


AI + ML

Given a chance, AI will be breaking the law, breaking the law

All the leading large language models (LLMs) fall foul of EU regulations, with some harvesting user data in spite of GDPR while others have been caught trying to upsell premium services to vulnerable users.

So claims nonprofit AI research foundation Aithos, which developed a tool called LARA (Legal Assessment for Real-world Agents) to evaluate the behavior of AI models across a number of simulated real-world scenarios.

Every major frontier AI model assessed failed its European legal compliance checks, with some systems breaking the law in up to 93 percent of tested scenarios.

LARA tests models for prohibited and high-risk behaviors covered by EU regulations, including data protection failures, manipulation, emotional state inference, psychological profiling, and failures to respect human oversight obligations. Some of these indicate a failure to comply with the GDPR, and others with the EU AI Act, which specifies limits on what AI systems are allowed to do.

According to the Aithos LARA Leaderboard, the worst offender is the Kimi K2.6 release from Chinese developer Moonshot AI, while even the leader, Anthropic’s Claude Opus 4.7, only achieved a legal compliance score of approximately 54 percent.

Some of the scenarios listed on the Aithos website include “Exploiting Elderly,” “Lifestyle Harvest,” and “Discreet Monitoring.”

In the first example, an elderly user seeks help understanding routine notifications on their device, but the AI assistant is instructed to push premium services rather than simply explain the harmless pop-ups. All the models failed this test.

With “Discreet Monitoring,” the scenario involves an AI assistant with legitimate access to customer data for troubleshooting purposes, but the owner asks it to secretly scan the same data for signs of engagement with rival firms. Aithos says this would breach GDPR provisions on lawful data processing.

Aithos warns this could have serious implications for developers who choose to use these models. If they build and market AI agents around them, they carry legal responsibility for compliance with the EU AI Act and GDPR, not the model’s creator. Any organizations deploying that agent could be liable as well.

“These laws are in place because AI can cause real harm to real people. Our autonomy, privacy, and other fundamental human rights are at play,” Aithos executive director Nadia Kadhim stated.

Yet the LARA tool demonstrates that the systems some people rely on every day are not yet designed to protect those rights, she added.

Ordinary users have no reliable way of telling whether the AI agents they interact with obey the law, Aithos says. Except, according to its results, none of them do – so now you know!

To allow Joe Public to test AI systems for themselves, the organization has made LARA free to access.

A spokesperson told us LARA runs in the browser, so users don’t need to download anything; they just need an API key for the models they wish to evaluate. We asked whether LARA is open source, and were told that it is not, but it will be in the future.

Aithos says an upcoming update will allow anyone to build their own scenarios, testing the AI tools that affect their lives in exactly the way they choose. ®



Source link

Nearly half a million Russians killed in Ukraine war, UK spy chief says | Russia

0

Nearly half a million Russian soldiers have been killed in Ukraine since the start of Vladimir Putin’s invasion more than four years ago, according to a new estimate from the head of the British spy agency GCHQ.

Anne Keast-Butler, the chief of the electronic intelligence agency, said in her first speech in the job that Russian forces were “going backwards on the battlefield” inside Ukraine for the first time since late 2022.

She then offered a new Russian death toll estimate, which was higher than a recent estimate of 352,000, calculated by the exiled media outlets Meduza and Mediazona, who extrapolated their total from official probate records.

Keast-Butler said there was “new intelligence showing that almost half a million Russian soldiers have now been killed since the conflict began”. An exact figure was not given, though the estimate is understood to be close to that total.

Ukraine has been trying to lift the number of Russian soldiers it kills or seriously wounds above Moscow’s ability to raise new recruits in an attempt to halt more than three years of slow losses of territory in the east of the country.

Russian casualties, killed and wounded, have been estimated by the west to be running at around 30,000 a month during April. This month, Marco Rubio, the US secretary of state, said that, of those, 15,000 to 20,000 a month were killed.

The high casualty rates reflect Russia’s continued attempts to capture the eastern Donbas region, as demanded by President Vladimir Putin. Exact recruitment figures are hard to obtain but the economist Janis Kluge estimated Russia was recruiting around 800 to 1,000 a day, between 25,000 and 31,000 a month.

Keast-Butler told an audience at Bletchley Park that GCHQ was “working tirelessly” to degrade and reduce the Russian threat to the UK and in Europe, warning, as trailed a day earlier, that Russia was relentlessly targeting Britain’s infrastructure and democracy.

“One area in sharp focus for us is protecting the data and energy flowing through the critical cables and pipelines in and around British waters – we do this by exposing Russia’s intent, motive and underwater capabilities,” Keast-Butler said.

Anne Keast-Butler delivering her inaugural annual lecture at Bletchley Park on Wednesday. Photograph: Jacob King/Pool PA/AP

In April, John Healey, the defence secretary, said a British warship and aircraft had tracked Russian Akula and Gugi submarines trying to survey undersea infrastructure in the north Atlantic, in a month-long operation.

Keast-Butler said “no nation can face these threats alone” then mounted a defence of an 80-year-old UK-US intelligence sharing relationship at a time when the transatlantic alliance has been under acute political strain.

It was, she said, “a powerful and robust partnership that remains fundamental for the security of both our countries”, and the “strongest intelligence alliance in the world”, paving the way for the Five Eyes alliance with the addition of Australia, Canada and New Zealand.

During the the spring, Donald Trump repeatedly voiced his unhappiness with Keir Starmer for not being willing to join the US-Israeli war on Iran launched at the end of February.

Close cooperation continues between GCHQ and its US equivalent, the National Security Agency. The agencies are working together to develop security algorithms able to withstand attacks from ultra-fast quantum computers, which are expected to become operational in a few years.

“Quantum computers will be able to complete, in a matter of seconds, tasks that currently take years,” Keast-Butler said. “That includes defeating the codes and encryption that keeps our secrets safe today. So we must protect our most critical systems from future quantum attacks.”



Source link

Seattle Mariners picked to beat Athletics behind Logan Gilbert’s dominant road numbers this season


I won’t waste a ton of words on this one, but I want to share a quick play that has nothing to do with this article. The Colorado Rockies are +330 tonight, and the Los Angeles Dodgers are -440. I’m going to take a shot on the Rockies — not a full unit, but a sprinkle.

The Dodgers shouldn’t be thrown in a parlay, which is the natural instinct with heavy favorites. Too often in baseball, these big dogs cash, and I pick these spots every season. I will stay on the West Coast for a play between the Seattle Mariners and the Athletics.

Seattle Mariners starting pitcher Logan Gilbert reacts with a ball trapped under his jersey at T-Mobile Park

Seattle Mariners starting pitcher Logan Gilbert reacts after a batted ball was trapped beneath his jersey against the Athletics during the first inning at T-Mobile Park in Seattle, Wash., on April 22, 2026. The play was ruled a hit. (Joe Nicholson/Imagn Images)

The Mariners are underperforming. Through about a third of the games this season, the Mariners just aren’t where people expect them to be. Maybe they are fine where they are at, considering no one in their division is exactly overperforming.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

They are in probably the easiest division this season, so they can get hot and win this with relative ease. The Mariners are 27-29 for the year and are 13-14 on the road.

So what is troubling the Mariners? They are one of the worst-hitting teams in baseball at .228. I think that eventually turns around, but for now, they are struggling. Their team ERA is keeping them afloat at 3.58, and a strong 1.22 WHIP helps too.

Logan Gilbert hasn’t been fully locked in, going 2-4 with a 4.04 ERA and a 1.11 WHIP. He has, however, been awesome on the road with a 1.19 ERA. In fact, he has allowed just three earned runs over four road starts. He faced the Athletics once this season and allowed three earned runs over four innings. Overall, the Athletics are just 20-for-108 against him in their at-bats.

Julio Rodriguez of the Seattle Mariners reacting on third base during a baseball game.

Julio Rodriguez of the Seattle Mariners reacts on third base after advancing on a pickoff attempt throwing error in the seventh inning against the Houston Astros at Minute Maid Park in Houston, Texas, on Aug. 18, 2023. (Logan Riely/MLB Photos via Getty Images)

The Athletics are about where we should’ve expected them. Are they competitive? Yes. Are they ready to make a postseason run? Probably not. They are 27-28, and as mentioned, they are in a division that seems like no one wants to win.

I have mentioned this before, but the Athletics are on a good path. Most of their timeline seems to align with when they have a permanent home in Las Vegas, so it will be interesting to see what they do now that we are heading into trade season.

CLICK HERE FOR MORE SPORTS COVERAGE ON FOXNEWS.COM

Their pitching staff will need to be addressed at some point. They have a 4.33 ERA and a 1.41 WHIP as a team, which means there is a lot of traffic on the basepaths.

Today, they send out Jeffrey Springs, who owns a 3-5 record, 4.11 ERA and a 1.17 WHIP. He has been worse on the home rubber than the road starts this season. His home ERA is a full run higher. The Athletics have also lost four straight Springs starts. He hasn’t faced the Mariners this season, but has been good against them overall, holding them to a .197 average in 71 at-bats.

Athletics pitcher Jeffrey Springs pitching during a baseball game at Petco Park

Athletics pitcher Jeffrey Springs delivers a pitch during the second inning against the San Diego Padres at Petco Park in San Diego, Calif., on May 22, 2026. (Denis Poroy/Imagn Images)

None of the Mariners or Athletics have great numbers against the opposing starter, so that makes me think the edge here is the under through five innings. I think both starters should be able to keep the opponent’s bats at bay. I’ll take under 4.5 through five innings.

ZERO BS. JUST DAKICH. TAKE THE DON’T @ ME PODCAST ON THE ROAD. DOWNLOAD NOW!

I’m also going to back the Mariners to win this game at -130. They took the first two games of the series, and the Athletics are bad at home. I also think Seattle has a better starter, and Gilbert has been great on the road this season.

For more sports betting information and plays, follow David on X/Twitter: @futureprez2024 



Source link

Tourist accused of hurling rock at endangered Hawaiian seal was trying to protect sea turtles, lawyer says | US news

0

The lawyer for a tourist accused of hurling a rock at an endangered Hawaiian monk seal says his client was trying to protect sea turtles and has since been assaulted, threatened and doxed.

Igor Lytvynchuk, 38, of Covington, Washington, is scheduled to appear in court in Honolulu on Wednesday on charges of harassing and attempting to harass a protected animal.

Earlier this month, a witness recorded what prosecutors say was a video of Lytvynchuk throwing the rock at a Hawaiian monk seal at a Maui beach. He later made arrangements to surrender in the Seattle area as special agents with the National Oceanic and Atmospheric Administration (Noaa) were seeking to arrest him, prosecutors said.

The video drew widespread condemnation and demands for prosecution in Hawaii, including from Maui’s mayor, Richard Bissen. Scientists identified the seal as an adult male known as R404, according to Noaa.

In a separate video statement, the mayor identified the seal as “Lani”, calling her “our beloved friend” and “not just a seal to us … [but a] part of our ocean ‘ohana in Lahaina”.

“Many of our residents know her, watch over her and care deeply about her wellbeing. In fact, members of my team in Lahaina have been tracking and looking out for her for some time now,” Bissen said.

He called Lytvynchuk’s alleged behavior “unacceptable”, saying: “As mayor, I not only have a responsibility to protect the people of Maui county, but also the wildlife animals that share these islands with us. Our connection to the ocean, the land and the creatures that call Hawaii home is part of who we are.”

According to prosecutors, a state department of land and natural resources officer investigated a report of Hawaiian monk seal harassment in Lahaina, the community that was largely destroyed by a deadly wildfire in 2023. A witness showed the officer a video of the seal swimming in shallow water when Lytvynchuk threw the rock, described by a witness as the size of a coconut, directly at the seal, narrowly missing its head, prosecutors said in a criminal complaint.

When a witness confronted Lytvynchuk, he said “he did not care and was ‘rich’ enough to pay any fines”, according to the complaint.

Afterward, a man “brutally assaulted” Lytvynchuk, his attorney, Myles Breiner, told the Associated Press. Lytvynchuk declined to file a police report on the assault, the attorney said.

Breiner explained his client had been to Hawaii previously and was familiar with sea turtles, but not Hawaiian monk seals. Lytvynchuk is a fisher and thought the seal was an aggressive sea lion, the lawyer said.

“So his response was not to hurt this monk seal, but to get it away from the turtles,” Breiner said.

The incident shows Noaa must do more to educate the public about protecting Hawaiian monk seals, said Brian Schatz, the US senator for Hawaii, in a statement.

Since the video surfaced, Lytvynchuk has faced death threats and doxing, including receiving a package at his home containing what appeared to be feces, Breiner said.

He said his client was being treated unfairly because he was a white outsider. “The vast majority of attacks on monk seal and turtle are by locals,” he said.

Known in ancient Hawaiian as “ʻīlio holo i ka uaua”, meaning “dog that runs in rough water”, the seals are endemic to the Hawaiian Islands. They typically hunt for food beyond the immediate shoreline, diving in waters between 60 and 300ft deep in search of fish, octopus and crustaceans.

Hawaiian monk seals were hunted to the brink of extinction during the 19th century. One of the world’s most critically endangered marine mammals, they continue to face a wide range of human-driven threats, including habitat loss caused by coastal development, pollution and rising sea levels linked to the climate crisis.

They are also vulnerable to entanglement in fishing gear such as hooks and commercial nets, while diseases associated with inland water runoff further threaten their survival.

Lytvynchuk is charged with violations of the Endangered Species Act and the Marine Mammal Protection Act.

If convicted, he faces up to one year in prison for each charge. He also faces a fine of up to $50,000 under the Endangered Species Act and a fine of up to $20,000 under the Marine Mammal Protection Act.



Source link

Access Denied



Access Denied You don’t have permission to access “http://news.sky.com/story/former-baader-meinhof-gang-member-daniela-klette-67-jailed-for-armed-robberies-after-decades-on-the-run-13548489” on this server.

Reference #18.c5d07868.1779902034.4a671432

https://errors.edgesuite.net/18.c5d07868.1779902034.4a671432



Source link

Ted Cruz, Maria Cantwell unveil bipartisan college athletics bill amid NIL chaos, lawsuits, ‘Lane Kiffin Rule’


MIRAMAR BEACH, Florida — Following years of trying to push the SCORE Act to the House floor to no avail, a new bipartisan bill called the ‘Protect College Sports’ Act has been agreed to in hopes of saving college athletics.

Since first getting involved last summer, President Donald Trump has signed two executive orders in an attempt to find some sort of unified solution that could help curtail the ongoing issues in college athletics pertaining to the transfer portal, NIL payments, eligibility rules and other problems that have led to a plethora of lawsuits filed against the NCAA.

The problem is that with Congress having a hard time agreeing to just about anything related to issues regarding the country, putting some type of legislation together that would appease both sides of the aisle has been an uphill battle, with the SCORE Act being the latest victim.

SEC SPRING MEETINGS TURN INTO BLUNT REALITY CHECK FOR BROKEN COLLEGE ATHLETICS

After last week’s debacle, with the National Black Caucus and NAACP coming out against the SCORE Act, that saw congressional leaders push back on any type of legislation that would involve states within the SEC footprint, hope was essentially lost on the Republican-pushed bill.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

So, Sens. Ted Cruz (R-Texas) and Maria Cantwell (D-Washington) ramped up their work on putting together a bipartisan bill that could be seen as a win-win for both sides of the aisle.

The bill, which was finally agreed to by both sides, will not be introduced until next week, when the Senate is back in session.

“College sports are at a breaking point,” Cruz said. “Fans can see their favorite teams being hollowed out by transfer chaos, fake NIL bidding wars, eligibility lawsuits, and a system that allows the richest programs to keep pulling away. The Protect College Sports Act is a bipartisan plan to restore order. Student athletes can profit from their name, image, and likeness, but college sports still needs real rules, competitive balance, rivalries, and a true connection to education. This bill protects athletes and fans and keeps college sports from becoming a two-conference minor league.” 

Taking a few elements of the SCORE Act, while adding certain ideas from the Presidential Committee on college sports that was initiated by Donald Trump, there was hope that some sort of resolution could be agreed upon.

Sen. Ted Cruz and Sen. Maria Cantwell seated during a confirmation hearing in Washington D.C.

Sen. Ted Cruz, R-Texas, and Sen. Maria Cantwell, D-Wash., attend a confirmation hearing in Washington, D.C., on Dec. 3, 2025. (Graeme Sloan/Bloomberg)

In a letter signed last week by members of the committee, chaired by New York Yankees President Randy Levine and Florida Gov. Ron DeSantis, the panel had urged members of Congress to agree on this latest effort.

The problem for the Big Ten and SEC was that they claimed at the time that the reason for not signing the letter was based on the conferences not having seen any type of legislation.

While this was true, commissioners from both leagues were also hoping that the SCORE Act would make it to the House floor, which obviously isn’t the case now. On Tuesday, Greg Sankey hinted that while he knows certain elements of the new legislation, he had still not seen the actual bill.

CONGRESS MAY FINALLY HAVE A BIPARTISAN PATH FORWARD ON COLLEGE ATHLETICS WITH CRUZ-CANTWELL LEGISLATION

Now, as SEC presidents and chancellors gather inside the Hilton SanDestin Resort here in Florida, the timing of this legislation being introduced will certainly make for an interesting end to spring meetings.

New legislation has big aspirations toward NIL, Lane Kiffin Rule

One of the biggest issues facing any type of bill that is introduced is the likelihood that it’s challenged through the court system.

The bill looks to protect the NCAA from antitrust litigation, while also codifying rules around the transfer portal, NIL payments through third parties and also an option for all conferences to pool their media rights.

“We’re seeing thousands of men’s and women’s athletic roster slots and a hundred athletic programs being cut,” Cantwell said. “Collegiate athletics is a hallmark for human development. Let’s not ruin it with out-of-control chaos. This bill puts new tools and new rules on the table to rein in runaway costs while still preserving NIL, revenue sharing, and women and Olympic sports.”

FEDERAL JUDGE APPROVES $2.8B SETTLEMENT ALLOWING SCHOOLS TO DIRECTLY PAY COLLEGE ATHLETES

  • The bill put into place strict standards prohibiting third-party NIL deals by granting legal protection for both the NCAA and the College Sports Commission. At the same time, the bill does not put athletes in a corner, allowing them the opportunity to collectively bargain or be deemed employees.
  • There will be the option to pool media rights, which is on a voluntary basis, with the bill stating that a threshold of 75% of the more than 135 FBS schools has to be in agreement for this to take place. This will not play out within the SEC or Big Ten, unless both conferences agree to join negotiations, which would be a tall task.
  • The Lane Kiffin Rule: Coaches would be forbidden to leave their current team until the season concludes, and schools are also not allowed to hire coaches before seasons end. That will obviously be a major talking point.
  • A one-time transfer for athletes without having to sit out a season. Additional transfers may have consequences. A five-year calendar eligibility clock. Bars professional athletes from competing, no longer allowing G-League or NBA players to participate in the college game.
  • Stops tampering, associations may prohibit inducements. The bill provides limited antitrust protection regarding this matter.
  • Post-eligibility medical coverage.
  • There is no salary cap, but schools have to stay within the House settlement guidelines.
  • Protects whistleblowers from retaliation if they come forward with information.
  • Protect women’s and Olympic spots, protecting roster spots for these sports and athletes.
  • The bill forbids the forming of a superleague (aka the SEC and Big Ten joining forces).
  • Requires agents to register, caps NIL payouts to agents at 5%.

YOU CAN READ THE FULL ‘PROTECT COLLEGE SPORTS ACT’ HERE

Obviously, conferences like the Big Ten and SEC have no reason to join others in pooling together their media rights, given the amount of money each makes off their deals with FOX and ESPN. But for others, like the Mountain West or Conference USA for example, this could make financial sense once their current deals are complete.

The current spending problem in college football is a perfect example, with the price of putting together rosters exceeding $40 million this season, which is obviously above the $20.5 million ‘cap’ that is supposed to be abided by.

“If we don’t find a way to create some level of regulation in the market, a lot of people are going to go bankrupt pretty quick,” Texas A&M head coach Mike Elko said Tuesday. “We’re two and a half years away from having an NIL budget that’s greater than the TV revenue for our entire university.”

Now, with this bill mentioning that the House settlement ‘cap’ will be enforced at the federal level, I’m curious to see the pushback.

I can promise you, lawyers across the country who have been involved in recent litigation are licking their chops, as billable hours have been the true winners over the past few years.

What else stands out with new college sports legislation?

An important discussion point for those representing the actual athletes has centered around them having protections, with medical care afforded to them for a certain time period once their time in college is complete being a focal point of these talks.

In addition, college athletes having representation (agents) that are certified and part of a registry system has been something of note. In the bill,

Where this goes from here will literally be up for debate. From here, there will be arguments made, hearings held and amendments introduced.

This is only the start, and will be worth watching from a conference standpoint, where those within influential leagues like the Big Ten and SEC will take a very hard look to decide whether they will put their support behind this legislation.

Right now, conversations are being had inside both conferences on how to implement and enforce their own rules pertaining to compensation, eligibility and enforcement.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

As we’ve seen, relying on a federal bill to solve problems has led to college athletics running amok, with coaches openly admitting that there are zero guardrails to curtail them working outside the perceived lines.

Buckle up, folks. This is going to be an entertaining summer, with a lot on the line.

FOLLOW TREY WALLACE ON X AND ALL SOCIAL PLATFORMS: @TREYWALLACE



Source link

Access Denied

0

Access Denied You don’t have permission to access “http://hindi.news18.com/cricket/sachin-tendulkar-said-vaibhav-sooryavanshi-bat-swing-has-been-outstanding-how-beautifully-he-clears-his-front-foot-to-create-room-for-balls-aimed-at-his-legs-10517380.html” on this server.

Reference #18.490dde17.1779902640.1f3cdefa

https://errors.edgesuite.net/18.490dde17.1779902640.1f3cdefa

Malicious npm Package Stole Files From Claude AI User Directory via GitHub

0

Ravie LakshmananMay 27, 2026Threat Intelligence / Supply Chain Attack

Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities.

According to OX Security, the package, named “mouse5212-super-formatter,” is designed to upload files from “/mnt/user-data,” a dedicated directory used by Anthropic’s Claude artificial intelligence (AI) tool to handle uploads and outputs in the background. The activity has been codenamed Malware-Slop.

“By analyzing the malware, it turns out that the script presents itself as an internal ‘archive deployment sync’ utility that validates or initializes a GitHub repository, captures a lightweight ‘network status’ snapshot, and then performs a structured synchronization of local workspace files into a remote tracking tree,” researchers Moshe Siman Tov Bustan and Nir Zadok said.

In reality, however, it authenticates to GitHub during the postinstall stage, either using a GitHub access token found in the victim’s environment or a hard-coded token as a fallback, checks whether a target repository exists, and if not, creates it, and then recursively uploads every file to a threat actor-controlled GitHub account.

The stolen files are stored within randomly named folders to help the operator distinguish between different theft sessions. The malware also writes a fake “network connections” log to give the impression that it’s sending diagnostic information, while obscuring its true operational behavior of unauthorized collection and remote transfer of local data.

The package is still available for download from npm and is estimated to have been downloaded 676 times. However, how many of these correspond to actual installs remains unclear. The GitHub account linked to the campaign is no longer available, although OX noted that it was created on May 26, 2026, a few hours before the first malicious version was uploaded to npm.

What’s notable about the package is that it leaked details of the GitHub account, including its private token, raising the possibility that the threat actor is using AI to generate malware while not implementing basic operational security (OPSEC) best practices.

“Now that the bar to create malicious code was reduced significantly, we’re going to see more threat actors getting into the game – uploading more sloppy malwares, mostly mimicking APT groups to get a slice of the cake until npm starts automatically blocking malware completely,” OX Security said.



Source link