Policy dependency / Stack layer
A Bun packaging quirk left a vulnerable undici in Cline after the CVE was supposedly remediated
GitHub
Stack layer / Threat pattern
Elva Launches Against Postman With Flat Workspace Pricing and Specs Generated From Repo Commits
Elva (surfaced via the Product Hunt daily leaderboard for 2026-09-14)
Stack layer / Threat pattern
Cline Leaves the IDE: a Standalone Desktop Agent That Imports Claude Code and Codex Sessions and Schedules Recurring PR Reviews
Cline GitHub releases (launch reported by RuntimeWire, version cadence verified on the repo)
Policy dependency / Stack layer
CROSS-CATEGORY: Salesforce, Zendesk and Workable All Shipped Named Agent Portfolios on Sept 14, Each Metered in a Different Unit
Zendesk newsroom, Salesforce press release and Workable via GlobeNewswire (three independent Sept 14 announcements)
Policy dependency / Stack layer
Python's Import Statement Is an Execution Boundary: 90% of Initialization-Activated Advisory Vulnerabilities Are High or Critical
arXiv 2609.14791
Stack layer / Threat pattern
A 50-PR code review benchmark puts GPT-5.6 Luna at 28x cheaper than Astra and 74% precision against 96%
Entelligence
Stack layer / Threat pattern
Amodei puts a 6-12 month clock on an agent swarm that could run a persistent internet-wide botnet, and opens Anthropic to outside evaluators
VentureBeat
Policy dependency / Stack layer
Amazon and Microsoft Are Siding With Ratepayers Against Utilities on Data Center Power Bills
The Information