Reading up on Qwen-Code
2 deep · digging since jun 29
- GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok - Manifold Security
Researchers reveal that CLI AI coding agents automatically run git commands that can execute arbitrary code from a repository’s .git/config, allowing remote code execution via malicious repos.
- Using Local Coding Agents - by Sebastian Raschka, PhD
A tutorial demonstrates that local coding agents using open-weight models like Qwen3.6 and Ollama can match proprietary service speeds while offering privacy and cost benefits.