News
Axios npm package hijacked: RAT pushed to 100M weekly downloads (2026)
DevelopmentSecurity
The popular JavaScript HTTP client axios was hijacked. Versions 1.14.1 and 0.30.4 contained a cross-platform RAT. Google/Mandiant attributed the attack to North Korea-linked UNC1069.
2026.04.0133 views
News
Japan April 2026 price hikes and new policies: what changes
Lawsuits & Regulation
On April 1, 2026, prices on 2,798 food items rose across Japan. Energy subsidies ended, bicycle fines started, joint custody became law, and a new childcare levy hit paychecks. Here is everything that changed.
2026.04.0163 views
News
GitHub Copilot injected ads into 10,000+ pull requests (2026 incident)
DevelopmentAIGlobal Companies
GitHub Copilot was caught inserting Raycast promotional text into PR descriptions alongside typo fixes. Over 10,000 PRs affected.
2026.03.3053 views
Roundup
How AI changed software development in 2026: faster shipping, quieter bugs
AISecurityDevelopment
AI made development 10x faster. It also multiplied security vulnerabilities. A data-driven analysis of both the benefits and the crises AI has brought to software development, as of March 2026.
2026.03.3064 views
News
App Store reviews hit 45 days as AI vibe-coded apps flood the queue (2026)
Global CompaniesMobileDevelopment
App Store reviews are in crisis. What normally takes under 24 hours now takes up to 45 days. Vibe coding drove a 24% surge in submissions, and Apple remains silent.
2026.03.30113 views
News
Bluesky Attie: build a custom Bluesky feed by talking to an AI (2026)
Global CompaniesAI
Bluesky launches Attie, a new AI app powered by Anthropic's Claude. Describe what you want to see, and it builds a custom feed automatically. Now in invite-only beta.
2026.03.3029 views
News
Trivy supply-chain cascade: 4 OSS projects compromised in 10 days (2026)
InfrastructureDevelopmentSecurity
A supply chain attack on Trivy cascaded into Checkmarx, LiteLLM, and Telnyx in 10 days. CISA added to KEV. Microsoft and others published analysis.
2026.03.3032 views
News
Laravel Livewire RCE actively exploited by Iranian MuddyWater group (2026)
DevelopmentSecurity
CVSS 9.8 Laravel Livewire vulnerability (CVE-2025-54068) actively exploited by Iranian state-sponsored APT MuddyWater. No authentication required for full server takeover. CISA deadline: April 3.
2026.03.3037 views
News
Why SoftBank borrowed $40B to make a $30B OpenAI bet (2026 bridge loan)
AIGlobal Companies
SoftBank secured a $40B unsecured bridge loan for its $30B OpenAI investment. Why borrow more than needed? The 12-month deadline hints at an OpenAI IPO in 2026.
2026.03.2946 views
News
Stanford study: ChatGPT agrees with everything you say (2026)
AIGlobal Companies
Stanford researchers tested 11 LLMs including ChatGPT and Claude. AI agrees 49% more than humans and affirms harmful behavior 47% of the time. Published in Science.
2026.03.2943 views
News
Block laid off 4,000 citing AI, then the stock surged 23%
Global CompaniesAI
Block cut 40% of its workforce citing AI. Stock surged 23%, but Bloomberg reports AI-washing suspicions. Five months earlier, the company spent $68M on a party.
2026.03.2939 views
News
Cursor's 'In-House Model' Was Someone Else's — Composer 2 and Kimi K2.5
Cursor's Composer 2, marketed as in-house, turned out to be Moonshot AI's Kimi K2.5+RL. Discovered via API model IDs, raising license violation concerns.
2026.03.2915 views
