Jules performs better than Gemini CLI despite using the same model, and more like Claude Code and OpenAI Codex.
Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.