17 posts
A self-propagating supply chain worm called Mini Shai-Hulud compromised TanStack, Mistral AI, UiPath, and 170+ npm/PyPI packages in hours. Then Nx Console got hijacked on the VS Code Marketplace. Here is what happened, what got stolen, and exactly how to check if you are affected.
Lightrun surveyed 200 senior SRE and DevOps leaders. 43% of AI-generated code needs manual debugging in production. Zero percent said they were very confident it works. Amazon lost 6.3 million orders to unreviewed AI code. The data is in.
World Labs open-sourced Spark 2.0: a streaming 3D Gaussian Splatting engine that renders 100M+ splat worlds in any browser via Three.js, WebGL2, and a virtual memory system borrowed from OS design.
DORA surveyed 5,000 devs. AI makes good teams great and broken teams worse. Here is the 7-capability playbook that separates the two.
A single system prompt that turns any LLM into a senior production readiness reviewer. 17 categories. PASS/YELLOW/RED verdicts. Evidence-backed findings. The final gate before you ship.
A Claude Code skill cuts 65% of output tokens by making AI talk like a caveman. 87% savings on React debugging. Zero deps. Research says brevity makes LLMs smarter.
A new WICG proposal lets you render real, interactive HTML into canvas. Three primitives, privacy-preserving painting, and WebGL support. Here is everything you need to know.
Microsoft open-sourced 7 MIT-licensed packages for AI agent governance: identity, policy enforcement, trust scoring, and full OWASP coverage at sub-0.1ms.
EmDash racked up 7.6K GitHub stars in days. Mullenweg called it excellent engineering. Joost de Valk said it is the most interesting thing to happen to CMS in years. Five key takeaways from the first week.
Cloudflare dropped EmDash — the open-source CMS built to fix everything that made WordPress a security and speed nightmare for years.
For years we have been building AI agents that think in code but cannot run it safely. Dynamic Workers changes everything.
The models already have the raw capability. The jagged intelligence frontier is not about the AI — it is about you.
10 problems. 45 seconds. Got #1 via an exploit discovery. Here is the full breakdown.
Loading a skills.md into context is just prompt engineering. It does not change the model. Real skills need a different architecture.
Peter Steinberger built the most exciting open-source AI agent. Then Anthropic banned users for using it. OpenAI decided to partner instead.
Vibe Maxing: where builders orchestrate entire fleets of AI agents running in parallel, debugging each other, shipping features while you sleep.
From zero AI to full agent orchestration — a framework for understanding where you are on the AI-assisted coding spectrum.