A malicious npm package called `js-logger-pack` evolved through 29 versions into a full remote access trojan (RAT) named `MicrosoftSystem64` that exfiltrates stolen data to attacker-controlled Hugging…
Foursquare Open Source Places transitioned from public S3 bucket access to a new Places portal in October 2024, requiring user registration and token generation for data retrieval through an Iceberg c…
A malicious npm package named js-logger-pack, first observed in early April 2026, evolved across 29 versions into a cross-platform malware loader that deploys an 81 MB payload called MicrosoftSystem64…
Ashwin Gururaj, a data scientist and AI engineer based in Melbourne, Australia, is seeking full-time, contract, or internship opportunities. He recently built Sift, an open-source multi-agent fact-che…
A solo developer launched Agenlus, a browser-based reinforcement learning training platform designed to make RL accessible without requiring expensive hardware or installations. The platform allows us…
A malicious npm package called `js-logger-pack` evolved through 29 versions on the registry from April 2026 into a full remote access trojan that deploys an 81 MB binary named `MicrosoftSystem64` on W…
A developer built a production AI application for just $10/year by combining HuggingFace Spaces (free tier) with a Cloudflare Worker (free tier) and a custom domain. The setup provides 16GB RAM, 2 vCP…
A developer built a daily AI paper scanner using Ollama and Telegram, automating the retrieval and translation of HuggingFace Papers into Portuguese. The Python script fetches the day's top papers via…
AVTR-1, an open-weight flow-matching transformer for audio-driven avatars, has been released for real-time dialogue generation. The model renders lip-synced speech and active listening at 25 frames pe…
Chan Zuckerberg Biohub released ESMC, ESMFold2, and ESM Atlas under an MIT license this morning, and Sheaf v0.11 shipped support for both model backends within twelve hours. The same-day integration w…
A hidden bottleneck in LLM proxy architectures is causing 5-13 millisecond blocking delays per request during tokenization, a CPU-bound operation that most systems treat as instantaneous. In event-loo…
BetaGrace v4.0 is a full-stack AI agent platform for creative writing, multi-modal generation, and narrative exploration, built with TypeScript, React, Express, and PostgreSQL. It operates entirely on…
KVBoost is a new open-source Python library that accelerates HuggingFace LLM inference by implementing chunk-level KV cache reuse, achieving 3–5× faster time-to-first-token (TTFT) and up to 85% cache …
Microsoft's Python Risk Identification Tool (PyRIT) is an open-source framework designed to automate red team testing of large language model (LLM) systems by chaining together targets, prompt convert…
The author successfully connected an AI agent called OpenClaw to a physical robot arm, enabling it to configure the arm, grasp objects, and train another AI model for object manipulation. This experim…
PyTorch's `torch.load()` function uses the Python pickle format for serialization, which inherently executes arbitrary code when loading a file, making it trivially exploitable for remote code executi…
Researchers at Microsoft have introduced AutoSP, a compiler-based solution that automatically converts standard training code into multi-GPU sequence parallel code for long-context language model trai…