This Week: A Perfect 10, an AI Agent Blind Spot, and ClickFix Everywhere
· 8 min read
A browser. A plugin. An npm package. A login screen. All normal stuff, and all the source of a real incident this week. Nothing here is exotic. It's mostly things people already trusted, doing something they weren't supposed to.