The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel ...

In a surprise twist, Anthropic has acquired Bun, the popular JavaScript runtime, igniting discussions within the developer community. This acquisition comes shortly after unsettling statements were ...

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...

The alternative JavaScript runtime Bun, originally written in Zig, got an AI-assisted rewrite in Rust in the past week. That's startling enough by itself, but the way it was rolled out unilaterally by ...

Over 100 NPM and PyPI packages were injected with malicious code in the Miasma and Hades Shai-Hulud supply chain attack ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

Boris Cherny was asked at Brainstorm Tech if he was concerned about the rapid progress of AI: "Yes." ...

Anthropic just shipped Claude Opus 4.8, its most capable publicly available AI model. Arriving just 41 days after its predecessor, Opus 4.8 introduces dynamic workflows that coordinate up to 1,000 ...

July 2026, blocking install scripts, Git dependencies, and remote URL sources by default. Every team running npm install in ...

Anthropic shipped Claude Code Dynamic Workflows as a research preview on May 28, 2026, and the feature is architecturally more consequential than the Opus 4.8 benchmarks that dominated most coverage ...