A developer has built a scientific computing platform called Cognitive Discovery System entirely in pure Python without NumPy, achieving O(N log N) FFT, O(N³) LU decomposition, and a quantum state-vec…
Anthropic's Model Context Protocol (MCP) standardizes how LLM-powered applications connect to data sources, replacing custom integrations with a single interface. The protocol uses JSON-RPC 2.0 and su…
GitHub now allows pull requests created by github-actions[bot] to trigger CI/CD workflows, but only after a maintainer with write access explicitly approves the PR. The change, effective June 11, fixe…
Researchers presented a method for cross-language detection of malicious packages in npm and PyPI ecosystems at a 2023 conference. The approach aims to identify security threats across JavaScript and …
Luau-wasm 0.1a0 was released on June 13, 2026, enabling WASM wheels for Pyodide. The release follows a guide on publishing WASM wheels to PyPI.…
Python 3.14.6 shipped June 10 with 179 bugfixes, but the t-strings feature introduced in October 2025 now has its first major library adopter: SQLAlchemy 2.1 added native t-string support in January, …
A developer built ctxstash, a zero-dependency command-line tool that packs a codebase into a single Markdown file with a token count estimate, making it easier to share code with LLMs like ChatGPT and…
Socket's Threat Research team identified 23 new malicious PyPI packages in the Mini Shai-Hulud, Miasma, and Hades supply chain attacks, expanding the campaign to 471 artifacts across npm and PyPI. The…
The DocLang Project has released DocLang, an AI-native markup format for unstructured content that maps to LLM tokens while preserving structure, semantics, layout, and geometry. The repository hosts …
Guardian Runtime, a local-first security middleware and FinOps firewall for AI agents, now intercepts every prompt and response locally to stop data leaks and runaway token costs. The tool tracks toke…
A new variant of the Miasma worm has been discovered exploiting npm's binding.gyp build file to execute malicious code during package installation, bypassing traditional package.json script audits. Th…
The Miasma software supply chain attack toolkit has been released as open source across multiple GitHub repositories, likely through compromised developer accounts. The toolkit enables attackers to ex…
Socket Threat Research identified 23 new malicious PyPI packages in the Mini Shai-Hulud, Miasma, and Hades supply chain attacks, targeting bioinformatics and AI/MCP developers with trojanized native e…
Socket detected a coordinated PyPI compromise involving 37 malicious wheel artifacts across 19 packages, part of the Shai-Hulud/Miasma campaign that uses Python startup execution to download Bun and r…
Jhansi.io v0.3 introduces persistent dependency management for AI-generated code, eliminating the need for manual package installation in cloud sandboxes. The update automatically installs dependencie…
Thinking Machines Lab released two open-source libraries, `tinker` and `tinker-cookbook`, to help developers and researchers fine-tune large language models. The `tinker` SDK handles distributed train…
A new malware campaign dubbed 'Miasma' is spreading through IDE configuration settings, AI-assisted environments, and multiple package manager ecosystems, marking what researchers believe is the first…
A developer has released Cli Modelarium, an open-source command-line tool that enables statistically rigorous LLM comparisons directly from the terminal. The tool, available on PyPI under Apache 2.0, …
A developer built **Agent_Sudo**, a local permission gateway for AI agents that enforces allow/deny/approval policies and generates tamper-evident audit logs, publishing it to PyPI as v0.4.0 with ~190…
The developer behind .klickd has released version 4.1 of the portable, encrypted memory system for AI workflows, addressing the problem of disposable memory that resets between sessions. The open-sour…