170 Packages. 518 Million Downloads. One Worm.
A self-propagating worm hit TanStack, Mistral, UiPath and 170+ npm/PyPI packages in hours, then Nx Console. What was stolen and how to check if you're hit.
#developer-tools
17 posts
→
43% of AI-Generated Code Breaks in Production
Lightrun surveyed 200 SRE and DevOps leaders: 43% of AI code needs manual debugging, 0% are very confident, and Amazon lost 6.3M orders to it.
aiengineeringvibe-codingdeveloper-toolsobservability
→
Spark 2.0 Streams 100M Gaussian Splats to Your Browser
World Labs open-sourced Spark 2.0: a streaming Gaussian Splatting engine rendering 100M+ splat worlds in any browser via Three.js and WebGL2.
ai3dopen-sourcewebengineeringdeveloper-tools
→
AI Is a Multiplier, Not a Magic Bullet: DORA 2025
DORA surveyed 5,000 devs. AI makes good teams great and broken teams worse. Here is the 7-capability playbook that separates the two.
aiengineeringdevopsdeveloper-toolsproductivity
→
The Last Prompt: A 17-Category AI Production Audit
One system prompt that turns any LLM into a senior production-readiness reviewer: 17 categories, PASS/YELLOW/RED, evidence-backed. The gate before you ship
aideveloper-toolsengineeringdevopsopen-source
→
Caveman Prompting: Cut LLM Output Tokens by 65%
A Claude Code skill that makes AI talk caveman cut output tokens 65%, 87% on React debugging. Why brevity makes LLMs cheaper and sharper.
aideveloper-toolsengineeringopen-sourcecontext-engineering
→
HTML in Canvas: The WICG drawElement Proposal
A new WICG proposal renders real, interactive HTML into canvas. The three primitives, privacy-preserving painting, and WebGL support, explained.
aideveloper-toolsengineeringopen-source
→
Microsoft Open-Sourced an Agent Governance Toolkit
Microsoft open-sourced 7 MIT-licensed packages for AI agent governance: identity, policy enforcement, trust scoring, and full OWASP coverage at sub-0.1ms.
aiai-agentssecurityopen-sourceengineeringdeveloper-tools
→
EmDash Hit 7.6K Stars in Days — Even Mullenweg Noticed
EmDash hit 7.6K GitHub stars in days. Mullenweg called it excellent engineering and Joost de Valk the most interesting CMS news in years. Five takeaways.
aicloudflaredeveloper-toolsopen-source
→
Cloudflare Launched EmDash, and It Will Eat WordPress
Cloudflare dropped EmDash — the open-source CMS built to fix everything that made WordPress a security and speed nightmare for years.
aicloudflaredeveloper-tools
→
Cloudflare Dynamic Workers: A Game Changer for AI Agents
For years we have been building AI agents that think in code but cannot run it safely. Dynamic Workers changes everything.
aicloudflareai-agentsdeveloper-tools
→
Everything Is a Skill Issue
The models already have the raw capability. The jagged intelligence frontier is not about the AI — it is about you.
aiengineeringdeveloper-toolsproductivity
→
I Hacked Firecrawl's CTF and Hit #1 on the Leaderboard
10 problems. 45 seconds. Got #1 via an exploit discovery. Here is the full breakdown.
aisecuritydeveloper-toolsengineering
→
We're Getting AI Agent Skills All Wrong
Loading a skills.md into context is just prompt engineering. It does not change the model. Real skills need a different architecture.
aiai-agentsdeveloper-toolsengineering
→
OpenClaw: The AI Agent That Started a War
Peter Steinberger built the most exciting open-source AI agent. Then Anthropic banned users for using it. OpenAI decided to partner instead.
aiai-agentsopen-sourcedeveloper-tools
→
Vibe Coding Was the Appetizer. Vibe Maxing Is the Meal.
Vibe Maxing: where builders orchestrate entire fleets of AI agents running in parallel, debugging each other, shipping features while you sleep.
aiai-agentsvibe-codingdeveloper-toolsproductivity
→
What Stage Are You in Your AI-Assisted Coding Journey?
From zero AI to full agent orchestration — a framework for understanding where you are on the AI-assisted coding spectrum.
aivibe-codingdeveloper-toolsproductivity