AI 編碼智能體自 2025 年 7 月以來的已確認安全事件：共 20 宗，13 宗始於開發者安裝的項目
We collected the confirmed security incidents involving AI coding agents since July 2025. 20 so far. 13 of them started with something a developer installed: a package, an MCP server, a skill, an editor extension. Sources on every entry: node9.ai/incidents
Nawi 彙整了自 2025 年 7 月以來涉及 AI 編碼智能體的 20 宗已確認安全事件，其中 13 宗始於開發者安裝的項目。這些項目包括套件、MCP 伺服器、技能和編輯器擴充功能；每宗事件均列有來源 node9.ai/incidents。
DEV Community
0 Add reaction
0 Like 
0 Unicorn 
0 Exploding Head 
0 Raised Hands 
0 Fire
0 Jump to Comments 0 Save Boost
Pick as gem
Copy link
Copied to Clipboard
Share to XShare to LinkedInShare to FacebookShare to Mastodon
Nawi Posted on Oct 20
We collected the confirmed security incidents involving AI coding agents since July 2025. 20 so far. 13 of them started with something a developer installed: a package, an MCP server, a skill, an editor extension. Sources on every entry: node9.ai/incidents
Top comments (0)
Subscribe
Personal Trusted UserCreate template Templates let you quickly answer FAQs or store snippets for re-use.
Submit PreviewDismiss
Are you sure you want to hide this comment? It will become hidden in your post, but will still be visible via the comment's permalink.
- [x] Hide child comments as well
Confirm
For further actions, you may consider blocking this person and/or reporting abuse
Tiger Data (Creators of TimescaleDB)Promoted
Agent Memory Is a Search Problem, Not a Storage Problem ❌
Long-term conversational memory is the ability to recall and reason over months of past conversations. It is one of the hardest unsolved problems in AI assistants, and the field has converged on a shared assumption about how to solve it.
Promoted
NawiFollow
"The 'Sudo' for AI Agents. 🛡️ Built by 15-year AI veterans to govern shell & tool calls from Claude Code, Gemini & MCP. Human-in-the-loop approval via Slack."
- Joined Mar 18, 2026
More from Nawi
We Read 760 Repositories That Run AI Agents in CI #ai#devops#githubactions#securityVaults, Brokers, and Sandboxes: What Each One Stops, and What None of Them See #ai#programming#agents#security
Promoted
DEV Community Live Events
Stream starts in…
--:--:--
All Things Open 2026
All Things Open is a technology conference focusing on the tools, processes and people making open source possible.
DEV Community is partnering to bring live events to the community. Join us or dismiss this billboard if you're not interested. ❤️
DEV Community Live Events
All Things Open 2026
Live
Starts in…
--:--:--
All Things Open is a technology conference focusing on the tools, processes and people making open source possible.
DEV Community — A space to discuss and keep up software development and manage your software career
Built on Forem — the open source software that powers DEV and other inclusive communities.
Made with love and Ruby on Rails. DEV Community © 2016 - 2026.
We're a place where coders share, stay up-to-date and grow their careers.
來源：DEV Community · dev.to