1
Show HN: A Trust Index for MCP Servers
MCP服务器安全评分工具上线，CI集成与采购审查一步到位。
As a security professional whose employer has given Claude and various other AI tooling to everyone at the company, I kept finding myself as the bottl…
2
Lost my first crypto from key theft from a project linked wallet
GitGuardian 自动扫描你的代码仓库，及时发现意外提交的密钥和凭证，防止因 git 误操作导致资产丢失。
Ive been using ClaudeCode, Im not complaining, it could of been any AI, but maybe this new Mythos/Fable release has massively increased attack surface…
3
NotifyMe, a self-hosted beeper app for AI agents and service updates
自托管通知神器，专为AI代理和服务更新打造，轻松集成Claude Code、GitHub Actions等工具流
Article URL: https://github.com/lbj96347/notifyme Comments URL: https://news.ycombinator.com/item?id=48427167 Points: 2 # Comments: 0
4
Red Hat 超 30 个 npm 包被植入 Miasma，专门窃取各种密钥
针对 npm 包被植马事件，推荐 Snyk——能自动扫描项目依赖中的恶意包和漏洞，支持 CI/CD 集成，实时守护密钥与凭据安全。
IT之家 6 月 2 日消息，科技媒体 bleepingcomputer 昨日（6 月 1 日）发布博文，报道称 Red Hat 名下 `@redhat-cloud-services` 命名空间超过 30 个 npm 包遭供应链攻击， 遭到攻击者投放 Shai-Hulud 新变种“Miasma”。 …