Microsoft's platform teams discovered that AI coding agents ignore new CLI tools and default to older, more documented predecessors due to training data gravity, even when explicitly instructed otherw…
Ultracoding, a new paradigm where AI agents programmatically spawn copies of themselves via code execution, is enabling massive multi-agent hierarchies that scale software development to unprecedented…
Bun, a JavaScript runtime, rewrote itself from Zig to Rust using an LLM in nine days, with the pull request containing over one million lines of Rust code. The machine translation raises concerns abou…
A developer argues that the key limitation for AI agents in enterprise software is not reasoning capability but non-gullibility—the ability to distinguish trusted instructions from untrusted data. Cur…
Bun's lead developer rewrote the entire JavaScript runtime from Zig to Rust in nine days using an LLM, raising concerns about code comprehension and safety. The speed of the rewrite, which merged desp…
Socket's Threat Research team identified 23 new malicious PyPI packages in the Mini Shai-Hulud, Miasma, and Hades supply chain attacks, expanding the campaign to 471 artifacts across npm and PyPI. The…
A developer released Intelligence Emotions, an open-source AI coaching team that runs inside Claude Code to help users build mental fitness by identifying self-sabotaging thought patterns and practici…
LinkLoom, a new TypeScript/Bun toolkit, provides a unified API, CLI, and MCP server for converting web pages, PDFs, and iframes into clean markdown. The tool handles JavaScript-heavy pages through a s…
Sven Reinck published a piece in JAVAPRO arguing that AI does not lower software costs but shifts them, making writing cheaper while understanding code becomes more valuable. Reinck proposed an intera…
Security researchers at StepSecurity have discovered the Hades Campaign, a sophisticated supply chain malware targeting Python developer environments that uses the Bun toolkit to execute multi-layer p…
Socket Threat Research identified 23 new malicious PyPI packages in the Mini Shai-Hulud, Miasma, and Hades supply chain attacks, targeting bioinformatics and AI/MCP developers with trojanized native e…
Socket detected a coordinated PyPI compromise involving 37 malicious wheel artifacts across 19 packages, part of the Shai-Hulud/Miasma campaign that uses Python startup execution to download Bun and r…
Anthropic's AI agents rewrote Bun's entire codebase from Zig to Rust in nine days, merging a million-line pull request on May 14 that passed 99.8% of existing tests but introduced over 10,000 `unsafe`…
Skawld has released an open-source TypeScript SDK that enables developers to embed full AI agent loops—including tools, sessions, permissions, streaming events, and subagents—into Node.js and Bun appl…
A developer built a functional coding agent in just 100 lines of code, bootstrapping it entirely without Claude Code. The project, called 100cc, started as a simple reimplementation of Claude's comman…
A developer created Kesha Voice Kit, a local-first speech-to-text and text-to-speech toolkit that runs entirely on-device as a single ~20 MB Rust binary with no cloud dependencies, API keys, or accoun…
Bun v1.3, the JavaScript runtime acquired by Anthropic in December 2025, now delivers sub-100ms content delivery when paired with Cosmic's REST API, creating a full-stack JavaScript stack optimized fo…
A developer's team has been running production AI agents on Bun for three months, finding the runtime's 15-25ms cold startup significantly improves interactive agent loops compared to Node's 80-120ms.…
Zig President Andrew Kelley has banned all AI-assisted code contributions to the open-source programming language, calling them "invariably garbage" and "negative value" that waste reviewer time. The …
Rig launched a local-first semantic knowledge graph tool that transforms codebases into interactive, navigable maps for AI coding agents. The tool runs entirely on the user's machine with no API keys …