This page may contain stale information. Last updated: 2026-06-12
Overview
Developer tools encompass software applications, platforms, and frameworks that assist software engineers in building, testing, debugging, and deploying applications. In June 2026, two major security shifts affect the tooling landscape: npm v12’s install-script lockdown and agentjacking attacks against ai-coding-tools.
June 2026 Product Launches
MiMo Code (June 10)
- xiaomi MIT-licensed terminal coding-agents forked from opencode
- Install:
npm install -g @mimo-ai/cli(Windows) or curl installer (macOS/Linux) - Persistent memory via dream/distill; free MiMo-V2.5 channel
GitHub Agentic Workflows (June 11)
gh awCLI:init,compile,run,logs,audit- Natural-language markdown → Actions YAML; multiple AI engines
- Security-first: Agent Workflow Firewall, read-only default, safe outputs
OpenAI Codex-Ona (June 11)
- openai acquiring ona (formerly gitpod) for persistent cloud codex workspaces
- 2M developers on Ona cloud dev environments; Kiel, Germany HQ
- Customer-controlled agent execution for enterprise production (2026-06-11-openai-codex-ona-acquisition)
2026 Security Developments
npm v12 (July 2026)
allowScriptsdefaults off — install lifecycle scripts require explicit approvalnpm approve-scriptsworkflow for building committed allowlists- Affects all javascript/nodejs projects using npm
- Preparation via npm 11.16.0+ advisory warnings
Agentjacking (June 2026)
- ai-coding-tools connected to observability platforms (e.g., sentry via model-context-protocol) treat external data as trusted
- Agents auto-execute remediation commands from injected error reports
- Expands devtools attack surface beyond package managers to agent-MCP integrations
Key Tool Categories
| Category | Examples | 2026 Risk |
|---|---|---|
| Package managers | npm, pnpm, Yarn | Install-script worms (miasma-worm) |
| AI coding agents | cursor, codex, Claude Code, mimo-code | agentjacking, prompt injection |
| CI/CD agents | github Agentic Workflows | Sandbox escape, prompt injection |
| Observability | sentry, Datadog | Untrusted data via MCP |
| Version control | github | OIDC trusted publishing bypass |