
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
Any URL -> design tokens -> DESIGN.md. Short CLI name for @designscan/extractor: npx designscan .
The short CLI name for @designscan/extractor —
any URL → design tokens → DESIGN.md, extracted from the live page. Runs
locally, no API key.
# one-time: install the headless browser
npx playwright install chromium
# any URL -> DESIGN.md (Google Labs open format)
npx designscan stripe.com --md --out stripe.DESIGN.md
# other formats: w3c (W3C Design Tokens JSON) | css (custom properties) | json
npx designscan vercel.com --format w3c --out vercel.tokens.json
# light + dark themes merged into one file, plus a visual proof sheet
npx designscan linear.app --theme both --md --preview --out linear.DESIGN.md
# MCP server for coding agents (stdio)
npx designscan mcp
This package is a thin shim: the engine — extraction, normalization, all the
emitters — lives in @designscan/extractor and is installed as this package's
only dependency. Docs, options, and the brand-corpus gallery:
FAQs
Any URL -> design tokens -> DESIGN.md. Short CLI name for @designscan/extractor: npx designscan .
We found that designscan demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.