Insights

Research notes on AI security, extension risk, and offensive testing.

pip install malware: Why Python and JavaScript Package Ecosystems Are [almost] Unfixable
·Ali Mosajjal

pip install malware: Why Python and JavaScript Package Ecosystems Are [almost] Unfixable

pip, npm, and lifecycle scripts make package installation a code execution problem. AI coding agents add another prompt-injection surface on top.

Read
To Catch a Rising (AI) Star
·Ali Mosajjal

To Catch a Rising (AI) Star

A practical take on where AI agents are heading, why current architectures age quickly, and why teams should build for the model curve instead of today's constraints.

Read