
Security News
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.
Unified search extension for Pi coding agent — mgrep semantic search + DuckDuckGo fallback. Auto-installs mgrep. Zero config.
One dependency. Zero config. Auto-installs itself.
Unified search extension for Pi Coding Agent — semantic search + web search + page reading. mgrep handles everything.
# Install
npm install -g pi-mgrep
# Restart pi — done.
# mgrep auto-installs on first use if missing.
No ripgrep. No manual mgrep install. No API key required.
Three LLM-callable tools, automatically registered.
search — Local Searchmgrep semantic search. Works for exact symbols AND natural language.
search({ query: "registerTool" })
// → exact match with file + line context
search({ query: "error handling logic", answer: true })
// → AI-generated summary of relevant code
web_search — Internet Searchmgrep web with automatic DuckDuckGo fallback.
web_search({ query: "React 19 new features" })
// → 3 ranked URLs with match scores
web_search({ query: "React 19 new features", answer: true })
// → AI-generated answer with citations
web_fetch — Page ReaderFetch URL, strip HTML, return plain text.
web_fetch({ url: "https://react.dev/blog/2024/12/05/react-19" })
// → Clean text content, max 6000 chars
| Command | Purpose |
|---|---|
/search <query> [path] | Local search with auto engine selection |
/web <query> | Web search with AI summary |
/fetch <url> | Fetch and display URL content |
┌───────────────────────────────────────────────────────────┐
│ Extension loads │
│ ├─ resolveMgrep() → found on PATH? → use it │
│ ├─ not found? → npm install -g @mixedbread/mgrep │
│ └─ still not found? → tools return helpful error │
├───────────────────────────────────────────────────────────┤
│ Tool: search │
│ query → mgrep search -s -c -m 5 <query> <path> │
│ answer=true? → adds -a (AI summary) │
├───────────────────────────────────────────────────────────┤
│ Tool: web_search │
│ primary → mgrep search -w -m <n*3> /tmp/mgrep-empty │
│ fail? → DuckDuckGo HTML scraping (zero-dependency) │
├───────────────────────────────────────────────────────────┤
│ Tool: web_fetch │
│ url → Node.js http.get → HTML strip → plain text │
│ 100% self-contained, no external deps │
└───────────────────────────────────────────────────────────┘
mgrep needs auth to Mixedbread's API. Two ways:
mgrep login
# browser → authorize → token saved
# repeat every 7 days
# ~/.zshrc
export MXBAI_API_KEY="mxb_your_key_here"
npm install -g @mixedbread/mgrep on first use/tmp/mgrep-empty ensures web search never mixes with local filespi-mgrep/
├── .pi/
│ └── extensions/
│ └── mgrep.ts ← the extension (340+ lines)
├── package.json
├── README.md
└── README_CN.md
MIT
FAQs
Unified search extension for Pi coding agent — mgrep semantic search + DuckDuckGo fallback. Auto-installs mgrep. Zero config.
The npm package pi-mgrep receives a total of 0 weekly downloads. As such, pi-mgrep popularity was classified as not popular.
We found that pi-mgrep demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.