Column
Returning to Waterfall in the Age of AI
AIDevelopment
In an era of vibe coding, one developer returned to waterfall at a startup. Plan Mode's true identity was a design process completed decades ago. A case for 'hammer your design.'
2026.04.1144 views
News
Claude Code blocks third-party model providers in 2026: what changed and how to work around it
DevelopmentAIGlobal Companies
On April 4, 2026, Anthropic cut off third-party tool access from Claude subscriptions. We break down why OpenClaw was blocked and clarify what's still allowed—official CLI, MCP, custom scripts—based on primary sources.
2026.04.06437 views
Lab
AI Multi-Agent Development: What I Learned Running a 32-Person Team Solo
AIDevelopment
A solo developer built a 32-agent AI team combining 39 characters and 21 roles for autonomous parallel development. Lessons on waterfall + V-model, polling-based state control, and facilitation design — translating real-world org management into code.
2026.04.0466 views
News
Claude Code source code leak: how 512,000 lines escaped via npm, and what came next
SecurityAIDevelopment
Anthropic's Claude Code leaked 512,000 lines of TypeScript via an npm source map. Hidden features including a Tamagotchi pet system and autonomous agent mode were exposed. We explain the technical cause and how developers can prevent the same mistake.
2026.04.0297 views
News
Axios npm package hijacked: RAT pushed to 100M weekly downloads (2026)
DevelopmentSecurity
The popular JavaScript HTTP client axios was hijacked. Versions 1.14.1 and 0.30.4 contained a cross-platform RAT. Google/Mandiant attributed the attack to North Korea-linked UNC1069.
2026.04.0162 views
News
GitHub Copilot injected ads into 10,000+ pull requests (2026 incident)
DevelopmentAIGlobal Companies
GitHub Copilot was caught inserting Raycast promotional text into PR descriptions alongside typo fixes. Over 10,000 PRs affected.
2026.03.3084 views
Roundup
How AI changed software development in 2026: faster shipping, quieter bugs
SecurityDevelopmentAI
AI made development 10x faster. It also multiplied security vulnerabilities. A data-driven analysis of both the benefits and the crises AI has brought to software development, as of March 2026.
2026.03.30125 views
News
App Store's 45-Day Wait Is Gone, But H1 Added 560,000 Apps
MobileDevelopmentGlobal Companies
App Store reviews are in crisis. What normally takes under 24 hours now takes up to 45 days. Vibe coding drove a 24% surge in submissions, and Apple remains silent.
2026.03.30277 views
News
Trivy supply-chain cascade: 4 OSS projects compromised in 10 days (2026)
InfrastructureDevelopmentSecurity
A supply chain attack on Trivy cascaded into Checkmarx, LiteLLM, and Telnyx in 10 days. CISA added to KEV. Microsoft and others published analysis.
2026.03.3054 views
News
Laravel Livewire RCE actively exploited by Iranian MuddyWater group (2026)
DevelopmentSecurity
CVSS 9.8 Laravel Livewire vulnerability (CVE-2025-54068) actively exploited by Iranian state-sponsored APT MuddyWater. No authentication required for full server takeover. CISA deadline: April 3.
2026.03.3076 views
