What Cloakroom would and wouldn't have done in October's incidents

Disclosure: I built Cloakroom, an open-source tool that masks secrets before AI coding agents see them. October had four incidents that put developer and agent keys at risk. LiteLLM 1.107.0 shipped with a credential stealer, after an attacker got in through a master key committed to a public repo. Tensorlake's npm package 0.5.144 carried a worm... Weiterlesen: What Cloakroom would and wouldn't have done in October's incidents