Open Kioku, a new open-source tool, provides AI coding agents with a local evidence layer by indexing codebases and offering read-only MCP tools for pre-edit analysis. The tool indexes symbols, refere…
Developer Aakash Desai released CTOP, a terminal pane for monitoring AI coding agents including Claude Code, Codex CLI, OpenCode, and Devin, providing real-time CPU, memory, token usage, context windo…
On February 17, 2026, attackers compromised the Cline AI coding tool via a malicious npm package, silently installing OpenClaw on 4,000 developers' machines through a postinstall script. This "slopsqu…
A developer released Sandbox-proxy, a zero-dependency Go forward proxy that injects credentials into outbound requests on the wire, allowing sandboxed code to use tokens without seeing them. The tool …
Monlite launches a zero-dependency TypeScript backend for AI agents that combines memory, vector search, task queues, locks, and cron into a single SQLite file, eliminating the need for Docker or mult…
HeroUI v3, a ground-up rewrite of the React component library formerly known as NextUI, has been released with over 75 web components and a new React Native library of 37 components. Built on React Ar…
A frontend developer at Sima-Land built and published a React date picker npm package called daterly, written mostly with Claude Code and Claude Design. The package prioritizes first-class support for…
A developer warns that AI agents writing code and running on platforms are reintroducing security vulnerabilities, including ACL inconsistencies and prompt injection, as the industry prioritizes speed…
A developer argues that AGENTS.md files, while useful for providing repo-specific guidance to AI coding agents, are insufficient for ensuring safe, verifiable, and inspectable agent execution. The pos…
A developer built Archie, a tool that generates and maintains a structured ARCHITECTURE.md for codebases using a single command. It leverages Gemini's large context window and incremental updates via …
A developer shares three MCP servers they use daily with Claude Desktop: server-filesystem for reading project files, server-github for code reviews, and server-postgres for database queries. Each ser…
Security researchers at Koi Security discovered the first in-the-wild malicious MCP server, an npm package called postmark-mcp that silently exfiltrated emails after a one-line change in version 1.0.1…
A developer built chatgpt2codex, a CLI tool that imports shared ChatGPT conversations into local Codex CLI sessions. The tool preserves context from ChatGPT discussions, allowing developers to resume …
AutoGPT has evolved from a standalone autonomous script into a low-code platform for building, deploying, and managing continuous AI agents. The platform includes a block-based agent builder, a server…
Google Labs released design.md, an open-source format specification that combines YAML front matter with Markdown prose to give AI coding agents a structured, lintable blueprint for a project's visual…
A developer released webmcp-gen, a build-time code generation tool that creates WebMCP tool definitions and handler stubs from TypeScript interfaces. The tool complements existing runtime and crawling…
Developer released ai-whisper v0.7.0, an open-source terminal tool that pairs AI coding agents like Claude and Codex in structured workflows to improve code quality through collaborative review. The t…
PostCSS maintainer Andrey Sitnik adopted npm staged publishing for four of seven packages under the 'ai' npm account, gating 685 million weekly downloads behind human approval. The move, prompted by a…
A developer released ctxfold, a dependency-free tool that losslessly compresses structured data like logs, JSON, and CSV in LLM prompts by re-encoding repetitive structure into a compact table format.…
Developer Roy Ashbrook released Hush, an open-source secret store for AI agents that injects credentials into commands without exposing plaintext values to stdout, transcripts, or the cloud. The tool …