Latest AI & ML news from Tech News
Инженер Trail of Bits поднял стенд на Docker и mitmproxy, подставил вредоносный код в ответы «взломанного» репозитория и прогнал 25 популярных менед…
I've been seeing the same line at the bottom of every npm install for years: added 47 packages, and 12 packages are looking for funding run `npm fun…
Двадцать лет ИБ-сообщество учило разработчиков не тащить в проект непроверенные зависимости. А потом мы доверили написание кода LLM, которые с удово…
Знакомый жанр новостей, правда? В популярный пакет или action подсунули вредоносный код, и все бегут проверять свои сборки. Таких историй…
My coding agents install packages all day. I don't read the names. Do you? Thought not. And that's a problem, because agents are brilliant at a few…
MemTensor: When an AI Memory Plugin Becomes the Credential Collector StepSecurity reported that the open-source AI memory framework MemTensor had it…
Originally published at https://aicoding-guide.com . A confirmation dialog on every npm run lint , npm run test and npm run build is the single bigg…
On October 7th I tried to publish @7onic-ui/tokens@0.3.7 and npm told me my own package didn't exist. npm error 404 Not Found - PUT https://regist…
An open-source React Native toolkit for vertical video feeds: snap paging, bounded video players, tap and scrub gestures, and pluggable video adapte…
В прошлой статье я показал cronsense, библиотеку, которая переводит расписание на русском или английском в cron: «по будням в 9:30» → 30 9 * * 1-5 .…
Picture the npm maintainer who did the hard work: moved publishing to OIDC, deleted the automation token from the password manager, celebrated with…
I ran git pull , then npm run build . That was all. I didn't open any suspicious file, and I didn't install any new package. Even so, the moment the…
Adding CAPTCHA to a React or Next.js app usually means relying on an external service. It supports: • Text, number, math, and image CAPTCHAs &…
A few weeks ago we found that our own pricing page listed a paid feature under the free tier. Nobody had noticed for a while. It made me wonder how…
I run a small actor that normalizes package metadata across npm, PyPI and crates.io — version, license, download counts, the usual. Every so often a…
The Shai-Hulud npm worm showed that opening a folder is enough to run code In August 2026 an attacker took over the GitHub account of a maintainer w…
I shipped a Goated tool Today: API Performance Profiler. It answers one question backend devs ask every day: how fast is this route, actually? Most…
Two ways to get exchange rates or VAT tables into an application, and both are wrong in a familiar way. Call a rates API on every request or every c…
I, had a recent security issue, that was fixed. So then I made some DEV posts for it, then I also complained about AI saying I'm a "threat actor" an…
Обычно под термином транслитерация подразумевают написание русскоязычного текста latinskimi bukvami. Однако это лишь одна сторона транслитерации - р…
What Git worktrees, parallel coding agents, and a cache pointing at the wrong directory taught us about the assumptions hiding inside node_modules .…
История left-pad, самого нелепого апокалипсиса в истории open-source. Заодно про то, почему миф о надёжности открытого кода не выдерживает проверки…
So here's the thing. I made a package called UI Tools , and some early versions were flagged for a serious security vulnerability involving its term…
You run pnpm audit in CI. It prints No known vulnerabilities found . The build goes green and you move on. Then someone runs npm audit on the same r…
🚨📢Launching Docgrity 🚀: Documentation integrity for you, your team, and your agent friends. 🤖 ujja ujja ujja Follow Sep 5 🚨📢Launching Docgrity 🚀: Do…
I published a small thing last week — video-bitrate-calculator , a zero-dependency library that works out what video bitrate fits under a target fil…
A dashboard panel went blank in production. No error in the logs, no failed request, no alert. The panel just showed "no data", and the query had be…
I Kept Rebuilding PDF Features in Vue 3, So I Built vue3-pdf-export I recently published vue3-pdf-export , an open-source Vue 3 + TypeScript package…
Hello everyone! Hope you are having a great day. 🖐️ There is always that foundational boilerplate code in NestJS projects that takes up most of our…
If you don't want to read the entire thing, my point is: Ai is literally flagging my entire account as malicious Even though MAL-2026-13416 was only…