Michael Bargury

Security research, hacking, AppSec, primarily focused on AI agents.

less than 1 minute read

I recently found this gem of a project. Looks like libraries.io was acquired by Tidelift that was acquired by Sonar, and is not abandoned. It’s AGPL license preventing others to pick it up?

For nearly three years, Libraries.io has been gathering data on the complex web of interdependency that exists in open source software. We’ve published a series of experiments using harvested metadata to highlight projects in need of assistance, projects with too few contributors and too little attention.

This project has been going on from ~2016?

Updated:

You May Also Enjoy

Make Real Progress In Security From AI

1 minute read

I gave a talk at the AI Agent Security Summit by Zenity Labs on October 8th in San Francisco. I’ll post a blog version of that talk here shortly.

How Should AI Ask for Our Input?

2 minute read

Enterprise systems provide a terrible user experience. That’s common knowledge. Check out one of the flash keynotes about the latest flagship AI product by ...

Someone Is Cleaning Up Evidence

1 minute read

AWS security blog confirms the attacker gained access to a write token and abused it to inject the malicious prompt. This confirms our earlier findings.