
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
A robust patch applier for AI-generated patches with explicit grammar, fuzzy matching, and idempotent application
agentpatch is a tiny toolkit + conventions for applying AI-generated patches safely and repeatably.
bin/apply_patchA robust patch applier that supports a simplified, explicit patch grammar:
*** Begin Patch / *** End Patch*** Update File: path*** Add File: path*** Delete File: path (requires --allow-delete)*** Rename File: old -> new (requires --allow-rename)@@ ... @@ hunks containing lines prefixed with:
- remove+ add contextInside the @@ ... @@ header you can include anchor directives:
@@ at:top @@@@ at:bottom @@@@ before:/regex/ @@@@ after:/regex/ @@If a - block can’t be found, anchors provide a deterministic insertion location.
If the + block already exists (exact or whitespace-insensitive match), the hunk is treated as already applied.
bin/apply_patch --verbose <<'PATCH'
*** Begin Patch
*** Add File: hello.txt
+hello\n
*** End Patch
PATCH
MIT
Run a small gauntlet against bin/apply_patch:
node tests/run-tests.mjs
# or point at a different apply_patch implementation
APPLY_PATCH=/path/to/bin/apply_patch node tests/run-tests.mjs
FAQs
A robust patch applier for AI-generated patches with explicit grammar, fuzzy matching, and idempotent application
The npm package agentpatch receives a total of 8 weekly downloads. As such, agentpatch popularity was classified as not popular.
We found that agentpatch demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.