euparliamentmonitor
Advanced tools
European Parliament Intelligence Platform - Monitor political activity with systematic transparency
European Parliament Political Intelligence Platform
🧠 Political intelligence · 🔍 Radical transparency · 🗳️ Democratic accountability · 🤖 AI-generated news in 14 languages
Explore the live platform — 🌐 euparliamentmonitor.com · 🧠 Political Intelligence Hub (methodology + artifact transparency, all 14 languages) · 📊 Analysis & Reports · 🗺️ Site Map (every page, every language) · 📔 API Reference
The European Parliament adopts laws that affect 450 million citizens across 27 member states. Yet most of what happens in Brussels and Strasbourg — committee dossiers, rapporteur appointments, coalition trade-offs, amendment battles, urgency files, trilogue dynamics — remains effectively invisible to the public. Press coverage is sparse, fragmented across national outlets, and rarely connects the procedural dots.
EU Parliament Monitor turns the EP's own open data into auditable political intelligence — and publishes it as readable news in 14 languages, every day, fully sourced.
This repository is the open-source platform behind euparliamentmonitor.com: an AI-driven newsroom that monitors plenary sessions, committee work, motions, propositions, and forward-calendar events; produces Economist-style analytical articles backed by 51 structured analysis artifacts per run; and exposes every methodology, template, and analysis tree publicly so any reader, journalist, researcher, or NGO can verify the analysis behind the prose.
| Pillar | What it means in this project |
|---|---|
| 🧠 Political Intelligence | Structured analytic techniques (ACH, SWOT/TOWS, PESTLE, scenario forecasting, devil's-advocate), Admiralty source grading, Words of Estimative Probability (WEP) bands, ICD-203 standards, and a 6-dimension political-threat framework — applied daily to live EP data. |
| 🔍 Radical Transparency | Every article links back to the analysis run it was rendered from. Every artifact links to its methodology. Every methodology is published. No black box. |
| 🗳️ Democratic Accountability | Public-data only. GDPR-clean. No personal profiling. Multi-language so a Finnish farmer, a Greek student, and a Polish journalist all get the same intelligence in their own language. |
| 🤖 AI-Generated News | 14 unified gh-aw agentic workflows + 1 translation workflow run autonomously, produce structured analysis, render deterministic HTML, and open publication-ready pull requests for human review. |
The published site is the audience-facing companion to this npm/TypeScript package. Two hub pages give the fastest entry point — bookmark them:
|
🌐 Live News Site — euparliamentmonitor.com Daily-updated front page with the latest Breaking News, Week / Month Ahead, Week / Month in Review, Committee Reports, Plenary Votes & Resolutions, and Legislative Procedures articles. Every article is generated by an AI agent from live European Parliament MCP data, peer-reviewed against a 51-artifact analytical baseline, and published in 14 languages (EN, SV, DA, NO, FI, DE, FR, ES, NL, AR, HE, JA, KO, ZH) with WCAG 2.1 AA accessibility, RTL support for Arabic and Hebrew, and JSON-LD NewsArticle structured data linking back to every source artifact.
|
|
🧠 Political Intelligence Hub The audit-ready transparency layer behind every published article. A single, fully-linked index into 17 methodologies, 52 analysis templates, 19 tradecraft references, and over 170 daily analysis runs producing 1,700+ structured artifacts — including the 10-step AI-driven analysis protocol, OSINT tradecraft standards (Admiralty / WEP / SAT / ACH), the political-threat framework, the political SWOT framework, and the per-artifact construction rules. Every link opens directly on GitHub so readers can verify the analysis behind the prose. Available in all 14 supported languages. |
|
🗺️ Human-Readable Site Map Index of every page on the platform — landing pages, news articles, and technical documentation — across all 14 languages. Best entry point for SEO crawlers, audience navigation, and discovering historical articles. Companion to the machine-readable sitemap.xml and per-language sitemap_<lang>.html variants.
|
|
📔 TypeDoc API Reference TypeDoc-generated reference for every public symbol in the euparliamentmonitor npm package — the EP MCP client (60+ tools), the deterministic article aggregator, the 5-tier metadata resolver, and the multi-language renderer. Companion 📓 Test Coverage and 🎭 E2E Report dashboards are linked from the same documentation hub.
|
📖 Quick Links:
🤖 Agentic Pipeline:
00→09) + npm run lint:prompts drift-guardnews-*.md agentic workflows (14 unified news-<type>.md covering 14 article types — including the long-horizon quarter-ahead/quarter-in-review/year-ahead/year-in-review/term-outlook/election-cycle set added in 2026-Q2 — plus news-translate.md) + CI workflows🔒 ISMS Compliance:
MCP Server Integration: The project uses the European-Parliament-MCP-Server v1.3.12 for accessing real EU Parliament data via the Model Context Protocol.
news-<type>.md, Stages A → B → C → D → E in one session) + news-translate.md (14-language flush translation) — compiled with
gh-aw v0.69.3 (pin in .github/workflows/compile-agentic-workflows.yml) to .lock.yml for automated news generation with AI-driven political
intelligence analysis. See .github/workflows/README.md.analysis/daily/<date>/<slug>/, 39
structured templates per run; repeat same-day runs reuse the folder and
append to manifest.json.history[]) and commit it; the deterministic aggregator
(src/aggregator/**, invoked via
npm run generate-article -- --run <analysis-run-dir> or
npm run generate-article:all for batch regen) then walks manifest.json,
cleans each artifact, and emits the final Markdown source + HTML with the
shared site chrome (stacked header + embedded 14-language switcher + TOC
sidebar + footer stats) and 14-language <link rel="alternate" hreflang>
entries. There is no AI-authored HTML step; article quality is guaranteed
editorially at the Stage-C completeness review over the artifact markdown.
See analysis/README.md and
analysis/methodologies/ai-driven-analysis-guide.md.USE_EP_MCP=false to disable MCP client
connection attemptsEU Parliament Monitor is an automated news generation platform that monitors European Parliament activities and generates multi-language news articles covering:
analysis/imf/README.md and
analysis/methodologies/imf-indicator-mapping.md.
World Bank is retained only for non-economic indicators (health,
education, social, environment, demographics, defence, agriculture,
innovation, governance).EU Parliament Monitor implements security-by-design with comprehensive security controls and ISMS compliance.
Project Classification (per ISMS Classification Framework and Open Source Policy):
Key Security Controls:
Security Metrics:
This project follows Hack23 ISMS Secure Development Policy:
EU Parliament Monitor is an open source project with transparent governance and community standards.
This project adheres to:
Every article published on euparliamentmonitor.com is the deterministic render of an analysis run — a directory under analysis/daily/<YYYY-MM-DD>/<article-type>/ containing structured Markdown artifacts (drawn from a 51-template catalog: 39 core mandatory + 12 extended optional) plus raw EP MCP / IMF / World Bank data payloads. The pipeline is split into five well-defined stages:
%%{init: {"theme":"dark","themeVariables":{"primaryColor":"#1565C0","primaryTextColor":"#fff","lineColor":"#90CAF9","fontFamily":"Inter, Helvetica, Arial, sans-serif"}}}%%
flowchart LR
A["🔵 Stage A<br/>EP MCP data collection<br/><i>60+ tools, IMF, World Bank</i>"] --> B["🟣 Stage B<br/>AI political intelligence<br/><i>51 artifacts · 2-pass review</i>"]
B --> C["🟡 Stage C<br/>Completeness gate<br/><i>line floors · WEP · Admiralty</i>"]
C --> D["🟢 Stage D<br/>Deterministic aggregator<br/><i>npm run generate-article</i>"]
D --> E["🔷 Markdown source<br/>news/*.en.md"]
D --> F["🟢 14-language HTML<br/>news/*-{lang}.html"]
F --> G["🟠 SEO indexes<br/>sitemap · RSS · JSON-LD"]
G --> H["🟢 S3 + CloudFront<br/>euparliamentmonitor.com"]
style A fill:#1565C0,color:#fff
style B fill:#7B1FA2,color:#fff
style C fill:#FFC107,color:#000
style D fill:#2E7D32,color:#fff
style E fill:#0288D1,color:#fff
style F fill:#2E7D32,color:#fff
style G fill:#FF9800,color:#000
style H fill:#2E7D32,color:#fff
Critical architectural property: AI agents author analysis artifacts in Markdown — never HTML. TypeScript code under src/aggregator/** deterministically renders the committed artifacts into HTML. There is no AI-authored HTML step and no template-prose leakage. This is what makes the public output reproducible, auditable, and resistant to hallucination.
📖 Full pipeline reference: Article-Generation.md · analysis/README.md · analysis/methodologies/ai-driven-analysis-guide.md
| Methodology | Purpose |
|---|---|
| 🎯 AI-Driven Analysis Guide | The canonical 10-step protocol every agentic run follows (Rules 1–22 + Step 10.5 methodology reflection). |
| 🗂️ Artifact Catalog | Master map: every artifact → methodology + template + depth floor + Mermaid diagram type. |
| 🔬 Per-Artifact Methodologies | 34 sections — one per artifact type — with construction rules and quality signals. |
| 🕵️ OSINT Tradecraft Standards | ICD-203 standards · Admiralty source grades · Kent / WEP probability bands · SAT catalog · OSINT ethics. |
| 🏷️ Political Classification Guide | 7-dimension EP event classification (actors, stances, urgency, policy domain, risk surface). |
| ⚖️ Political Risk Methodology | Quantitative 5×5 Likelihood × Impact scoring adapted from the Hack23 ISMS. |
| 🧮 Political SWOT Framework | Evidence-based SWOT/TOWS with ≥80-word depth floor per quadrant item. |
| 🛡️ Political Threat Framework | 5-framework integrated model: 6D Threat Landscape + Attack Trees + Kill Chain + Diamond + ICO Profiling. STRIDE explicitly rejected for political analysis. |
| 🔗 Synthesis Methodology | Stage B.7 significance scoring → synthesis summary → stakeholder perspectives → coalition dynamics → executive brief. |
| 🌍 Strategic Extensions | Scenario forecasts, ACH (Heuer), wildcards & black swans, comparative international, intelligence assessment. |
| 🗳️ Electoral Domain Methodology | EP10/EP11 electoral context, coalition mathematics (361-seat threshold), voter segmentation. |
| 📐 Per-Document Methodology | Atomic evidence-layer methodology for individual EP documents. |
| 🧾 Structural Metadata Methodology | Provenance, manifest.json, cross-reference maps, GDPR Article 30 compliance. |
| ✍️ Political Style Guide | The Economist-inspired tone, balance, attribution rules, multi-language considerations. |
| 💰 IMF Indicator Mapping | IMF WEO/Fiscal Monitor/IFS/BOP/ER/PCPS → EP article-type primary economic source. |
| 🌱 World Bank Indicator Mapping | Non-economic World Bank Open Data indicators (health, education, environment, governance, innovation). |
| 📏 Reference Quality Thresholds | Per-artifact line-count floors enforced at the Stage-C completeness gate. |
🔍 Browse all 17 methodologies, 52 templates, 19 tradecraft references, and 1,700+ artifacts produced across 170+ daily analysis runs on the Political Intelligence Hub.
Fourteen unified gh-aw article workflows plus a 14-language translation helper run on precision schedules, autonomously generating Economist-style political intelligence and opening publication-ready pull requests. Every workflow follows the same Stage A → E contract documented in Article-Generation.md. The single source of truth for every horizon's data window, cadence, mandatory artifacts, stage budgets, scenario depth and electoral overlay is the ARTICLE_HORIZONS registry in src/config/article-horizons.ts.
| Workflow | Article Type | Focus |
|---|---|---|
| 🚨 news-breaking.md | breaking | Rapid-response coverage of significant EP developments. |
| 📋 news-week-ahead.md | week-ahead | Forward calendar, committee agenda, urgency-file outlook. |
| 🔭 news-month-ahead.md | month-ahead | 30-day strategic horizon and risk forecast. |
| 🌐 news-quarter-ahead.md | quarter-ahead | 90-day legislative pipeline forecast + presidency-trio overlay. |
| 🛰️ news-year-ahead.md | year-ahead | 12-month strategic outlook with seat-projection sensitivity. |
| 🗓️ news-term-outlook.md | term-outlook | Full EP-term outlook anchored to the next-EP-election week. |
| 🗳️ news-election-cycle.md | election-cycle | EP-election span (±6 mo) — mandate scorecard + seat projection + Spitzenkandidaten arithmetic. |
| 📊 news-week-in-review.md | week-in-review | Past-week retrospective intelligence (D-8 → D-36 reporting window). |
| 📈 news-month-in-review.md | month-in-review | Monthly retrospective with cross-run continuity analysis. |
| 📚 news-quarter-in-review.md | quarter-in-review | Quarterly retrospective with pipeline transit + presidency-trio overlay. |
| 📜 news-year-in-review.md | year-in-review | Annual retrospective with mandate-fulfilment + term-arc + historical parallels. |
| 🏛️ news-committee-reports.md | committee-reports | Committee activity, rapporteur work, legislative-production analysis. |
| ⚖️ news-motions.md | motions | Plenary motions, resolutions, urgency files, political signals. |
| 📜 news-propositions.md | propositions | Legislative proposals and pipeline analysis. |
| 🌍 news-translate.md | translation helper | 14-language flush translation (manual dispatch only). |
Each unified workflow runs Stages A–E in a single 60-minute session (engine.mcp.session-timeout: 65m) and produces exactly one PR containing both the analysis artifacts and the rendered HTML. The earlier split-pair news-<type>-analysis.md + news-<type>-article.md layout was retired in the April-2026 aggregator migration. See .github/workflows/README.md for compile / lock-file / safe-output mechanics, WORKFLOWS.md for the full CI/CD catalog, and Article-Generation.md § Forward-looking horizons & election cycle for the new long-horizon and electoral pipeline.
📚 Prompt Library (
.github/prompts/) — 10 bounded-context prompt files (00-scope-and-ground-rules.md→09-troubleshooting.md) shared across every workflow. Thenpm run lint:promptsdrift-guard fails CI on banned patterns (checkpoint pr,keep-alive,heartbeat,progressive safe output,push_repo_memory).
EU Parliament Monitor uses a layered agent model: a small set of product-domain agents owns the news pipeline, while infrastructure agents maintain workflows, contributions, and CI hygiene.
| Agent | Role |
|---|---|
| 🕵️ intelligence-operative | Senior political intelligence analyst — applies ACH, SWOT, PESTLE, OSINT tradecraft, threat framework. Owns Stage-B analysis artifacts. |
| 📰 news-journalist | The Economist-style EP reporting in 14 languages. Authors editorial prose only when analysis artifacts are signed off. |
| 🔄 data-pipeline-specialist | EP MCP integration (60+ tools), data quality, voting-records fallback to EP Open Data Portal. |
| 🎨 frontend-specialist | HTML5/CSS3, WCAG 2.1 AA accessibility, multi-language UI, RTL support. |
| ✅ quality-engineer | Vitest + Playwright, HTML validation, accessibility testing, performance benchmarking. |
| ⚙️ devops-engineer | gh-aw workflow compilation, GitHub Actions, S3/CloudFront deploy, MCP gateway. |
| 📚 documentation-architect | C4 models, Mermaid diagrams, ARCHITECTURE.md, ADRs. |
| 🛡️ security-architect (see SECURITY.md) | ISMS, GDPR, NIS2, EU CRA compliance — reviews data classification of intelligence products. |
| 📋 product-task-agent | Issue creation, ISMS tracking, capability-roadmap coordination. |
| 📣 marketing-specialist | Privacy-first multi-language engagement, GDPR-compliant outreach. |
| 💼 business-development-specialist | Strategic planning, civic-tech partnerships, sustainable transparency models. |
agentic-workflows.agent.md, news-generation.agent.md, ci-cleaner.agent.md, contribution-checker.agent.md, create-safe-output-type.agent.md, custom-engine-implementation.agent.md, grumpy-reviewer.agent.md, interactive-agent-designer.agent.md, technical-doc-writer.agent.md, w3c-specification-writer.agent.md. See .github/agents/README.md.
npm install euparliamentmonitor
import {
// EP MCP client (60+ open-data tools)
EuropeanParliamentMCPClient,
getEPMCPClient,
// Article generation (deterministic aggregator pipeline)
generateArticle,
aggregateAnalysisRun,
renderMarkdown,
// Cross-article intelligence index
buildIndexFromEntries,
findRelatedArticles,
generateCrossReferences,
// Multi-language support (14 languages, RTL aware)
ALL_LANGUAGES,
LANGUAGE_NAMES,
} from 'euparliamentmonitor';
// Or import specific modules for tree-shaking
import { EuropeanParliamentMCPClient } from 'euparliamentmonitor/mcp/ep-mcp-client';
import type { ArticleCategory, LanguageCode } from 'euparliamentmonitor/types';
Bundled capabilities:
/api/v2/decision endpoint when MCP returns empty voting payloads.manifest.json, cleans each artifact, renders Markdown source + 14 HTML variants with full SEO chrome, JSON-LD NewsArticle, hreflang alternates, and isBasedOn provenance lists.📦 Provenance: Published with npm provenance and SLSA Level 3 build attestations.
Primary — European Parliament MCP Server (Hack23/European-Parliament-MCP-Server v1.3.12+, fully operational):
Secondary — public economic & social context:
Boundary: Only public EP/IMF/World Bank data is used. No personal MEP profiling beyond public parliamentary roles. GDPR-clean by design.
EU Parliament Monitor implements security-by-design under the Hack23 ISMS framework.
| Dimension | Level |
|---|---|
| Confidentiality | Public (Level 1) — European Parliament open data only |
| Integrity | Medium (Level 2) — accuracy critical for democratic transparency |
| Availability | Medium (Level 2) — daily updates, 24h RTO |
| Strategic value | Democratic transparency, open civic-tech leadership |
| Framework | Scope | Evidence |
|---|---|---|
| ISO 27001:2022 | Information security management | SECURITY_ARCHITECTURE.md — A.5.10, A.5.12, A.5.23, A.8.11, A.8.28 |
| NIST CSF 2.0 | Identify · Protect · Detect · Respond · Recover | Compliance matrix in SECURITY_ARCHITECTURE.md |
| CIS Controls v8.1 | Operational security best practices | CodeQL, Dependabot, npm audit, SBOM |
| GDPR | Data minimization, purpose limitation | Public-data-only boundary, no profiling |
| NIS2 | Article 20, 21 cybersecurity risk management | THREAT_MODEL.md (STRIDE for software-security context) |
| EU Cyber Resilience Act | SBOM, vulnerability disclosure, Annex I/V | CRA-ASSESSMENT.md, SLSA provenance, SECURITY.md |
js/vendor/, strict script-src 'self' CSP, no external CDNGithubWorkFlowRole, HTTPS enforcement, step-security/harden-runner egress block📋 Full security architecture: SECURITY_ARCHITECTURE.md · SECURITY.md · THREAT_MODEL.md · CLASSIFICATION.md
git clone https://github.com/Hack23/euparliamentmonitor.git
cd euparliamentmonitor
npm install
npm run build # TypeScript compilation
npm run lint # ESLint (TypeScript in src/)
npm run lint:prompts # gh-aw prompt drift-guard
npm run htmlhint # HTML validation
npm run test # Vitest unit + integration (169+ tests)
npm run test:coverage # Coverage report (≥80% line, ≥75% branch)
npm run test:e2e # Playwright cross-browser E2E
npm run validate-analysis # Stage-C completeness gate
npm run generate-article -- --run analysis/daily/2026-04-24/breaking
npm run generate-article:all # batch regen every committed run
npm run generate-news-indexes # 14-language news index pages
npm run generate-sitemap # sitemap.xml + 14 sitemap_<lang>.html
npm run docs:generate # TypeDoc API docs + index
npm run serve # local static-site preview at :8080
By default the workflows run with USE_EP_MCP=true. To experiment locally with the European Parliament MCP Server:
git clone https://github.com/Hack23/European-Parliament-MCP-Server.git
cd European-Parliament-MCP-Server && npm install && npm run build
export EP_MCP_SERVER_PATH="$(pwd)/dist/index.js"
# or use the gateway helper:
source scripts/mcp-setup.sh
Set USE_EP_MCP=false to disable MCP and fall back to placeholder/test data.
| Topic | Document |
|---|---|
| 🌐 Live site | euparliamentmonitor.com · Political Intelligence Hub · Site Map |
| 🏛️ Architecture | ARCHITECTURE.md · FUTURE_ARCHITECTURE.md · DATA_MODEL.md · FLOWCHART.md · STATEDIAGRAM.md · MINDMAP.md |
| 📰 Article generation | Article-Generation.md — end-to-end pipeline reference |
| 🧠 Analysis chain | analysis/README.md · analysis/methodologies/ · analysis/templates/README.md |
| 🤖 Agentic pipeline | .github/agents/README.md · .github/skills/README.md · .github/prompts/README.md · .github/workflows/README.md · WORKFLOWS.md |
| 🛡️ Security & compliance | SECURITY.md · SECURITY_ARCHITECTURE.md · THREAT_MODEL.md · CLASSIFICATION.md · CRA-ASSESSMENT.md |
| 💼 Business | SWOT.md · BCPPlan.md · FinancialSecurityPlan.md · End-of-Life-Strategy.md |
| 🧪 Testing | UnitTestPlan.md · E2ETestPlan.md · test/README.md · e2e/README.md |
| 🚀 Release process | docs/RELEASE_PROCESS.md · SLSA Attestations |
| 📔 Generated docs | API Reference · Coverage · E2E Report |
"We're not just keeping up with AI — we're building the editorial infrastructure for the era when machines understand parliamentary procedure better than most MEPs."
Six-phase roadmap from current agentic news generation to AGI-enhanced transformative democracy, with human oversight maintained at every level.
timeline
title EU Parliament Monitor — AI Evolution Roadmap
section Phase 1 (2026)
Agentic News : 14 unified workflows
: 14-language generation
: Deterministic aggregator
: 51-artifact analysis catalog
section Phase 2 (2027)
Predictive Analytics : Voting outcome prediction
: Legislative impact forecasting
: Cross-party coalition detection
section Phase 3 (2028–2029)
Multi-Modal Intelligence : Video plenary analysis
: Real-time debate tracking
: Infographic auto-generation
section Phase 4 (2030–2031)
Near-Expert Analysis : 50+ parliament coverage
: Expert-level policy briefs
: Predictive governance models
section Phase 5 (2032–2033)
Global Coverage : 100+ parliaments
: Pre-AGI capabilities
: Cross-jurisdiction analysis
section Phase 6 (2034–2037)
AGI Era : Transformative democracy
: 195 national legislatures
: Human oversight maintained
📘 FUTURE_MINDMAP.md — capability evolution & system vision · 📗 FUTURE_WORKFLOWS.md — CI/CD evolution & automation roadmap
EU Parliament Monitor welcomes contributions from developers, journalists, translators, political scientists, OSINT analysts, accessibility experts, and security researchers.
| Resource | Purpose |
|---|---|
| CONTRIBUTING.md | Development workflow, code standards, contribution guidelines |
| CODE_OF_CONDUCT.md | Contributor Covenant 2.1 community standards |
| SECURITY.md | Vulnerability disclosure (48h ack · 7d validation · 30d remediation for criticals) |
| AUTHORS.md | Recognition of project contributors |
| LICENSE | Apache License 2.0 |
Channels: GitHub Issues (bug reports / features) · GitHub Discussions (Q&A) · security@hack23.com (vulnerabilities) · conduct@hack23.com (Code of Conduct)
Governance compliance: ✅ OpenSSF Best Practices · ✅ Hack23 ISMS aligned · ✅ Public repository with transparent decision-making · ✅ REUSE-compliant license headers · ✅ Conventional commits
Copyright 2024-2026 Hack23 AB
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
See LICENSE for the full text.
The news-generation foundation builds on the Hack23/riksdagsmonitor Swedish Parliament monitor. Sister projects in the Hack23 transparency portfolio: European-Parliament-MCP-Server (EP data MCP) · cia (Swedish Parliament intelligence, Java/Spring) · ISMS-PUBLIC (security policies).
Maintained by: Hack23 AB — Intelligence Operations Team
FAQs
European Parliament Intelligence Platform - Monitor political activity with systematic transparency
We found that euparliamentmonitor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.
Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.