Researchers at the University of Missouri-Kansas City developed 'Ghostcommit', an attack that hides prompt injection instructions inside PNG images to trick AI code reviewers into approving malicious …
Researchers at ASSET Research Group published a proof-of-concept attack called GhostCommit that exploits coding-agent pipelines by hiding exfiltration instructions inside image files in pull requests.…
AI hype is being used by companies as a cover to replace stable employment with precarious gig work, according to research and interviews. The trend accelerates gigification as laid-off tech workers t…
The Kubernetes community has introduced a framework for integrating AI into open-source maintainership that prioritizes human accountability, requiring transparent disclosure of AI usage in pull reque…
OpenAI released GPT-5.6 with three tiers—Sol, Terra, and Luna—for coding agents. Sol excels at long-horizon tasks and code review, while Terra offers a cheaper option for scoped work. The release intr…
AI agents differ from chatbots by placing an LLM inside a loop where the model decides when to stop, enabling autonomous task completion. The progression from single LLM calls to function calling, cha…
CodeRabbit launched its AI agent on Discord, offering open source maintainers a free tool to automate repetitive tasks like answering setup questions, triaging bug reports, and drafting fixes. The age…
Developer advocate Santosh Yadav argues that monorepos reduce code duplication and enable atomic changes across services, but warns that they require careful tooling and code review to avoid breaking …
CodeRabbit, the most installed AI app on GitHub and GitLab, has launched a new feature that shows the context behind each code review comment, allowing developers to see the source of a comment and di…
Tessl launched Tessl Agent, a tool that continuously scans PRs, coding agent session logs, and tickets to detect recurring error patterns and automate repetitive tasks. It creates skills to address co…
CodeRabbit launched its AI-powered code review agent directly inside Discord, allowing maintainers to investigate, plan, and automate code tasks without leaving chat. The agent uses scoped connections…
A new trend called 'loop engineering' is gaining traction in the software development community, where engineers design autonomous loops that allow coding agents to execute tasks without human interve…
CodeRabbit launched an Overview page for pull requests that consolidates AI summaries, mergeability status, and ranked blockers into a single screen, aiming to reduce code review time and bugs by 50%.…
A developer built three AI-powered Chrome extensions—PR summarization, risk scoring, and draft review generation—with zero backend cost by using a Bring Your Own Key (BYOK) architecture. The extension…
CodeRabbit CEO Brandon Gubitosa argues that the industry's focus on AI code generation speed has created a dangerous review bottleneck, with AI now writing up to 30% of code at Microsoft and Google. T…
AI-generated code is flooding GitHub and degrading codebases, with research showing AI-written code has 1.7 times more critical issues and 45% ships with OWASP Top 10 vulnerabilities. Major projects l…
Loop engineering, a new trend in software development, allows engineers to design autonomous coding agents that operate without human intervention, freeing them from manual prompting. The concept, pop…
GitHub has 630 million repositories, with nearly half of all new code written by AI, but developer trust in AI code dropped from 77% to 60%. Carnegie Mellon University found 6 million fake stars, and …
Ayush Sridhar, a junior developer, turned a CalHacks hackathon project into a software engineering internship at CodeRabbit. His project, merj, an AI-powered merge conflict resolver, won CodeRabbit's …
Inithouse, a studio shipping multiple products in parallel, tested seven code quality checkers on vibecoded projects built with Lovable, Cursor, and Bolt. Audit Vibe Coding won for AI-specific audits,…