A developer built Archie, a tool that generates and maintains a structured ARCHITECTURE.md for codebases using a single command. It leverages Gemini's large context window and incremental updates via …
A developer shares three MCP servers they use daily with Claude Desktop: server-filesystem for reading project files, server-github for code reviews, and server-postgres for database queries. Each ser…
Security researchers at Koi Security discovered the first in-the-wild malicious MCP server, an npm package called postmark-mcp that silently exfiltrated emails after a one-line change in version 1.0.1…
A developer built chatgpt2codex, a CLI tool that imports shared ChatGPT conversations into local Codex CLI sessions. The tool preserves context from ChatGPT discussions, allowing developers to resume …
AutoGPT has evolved from a standalone autonomous script into a low-code platform for building, deploying, and managing continuous AI agents. The platform includes a block-based agent builder, a server…
Google Labs released design.md, an open-source format specification that combines YAML front matter with Markdown prose to give AI coding agents a structured, lintable blueprint for a project's visual…
A developer released webmcp-gen, a build-time code generation tool that creates WebMCP tool definitions and handler stubs from TypeScript interfaces. The tool complements existing runtime and crawling…
Developer released ai-whisper v0.7.0, an open-source terminal tool that pairs AI coding agents like Claude and Codex in structured workflows to improve code quality through collaborative review. The t…
PostCSS maintainer Andrey Sitnik adopted npm staged publishing for four of seven packages under the 'ai' npm account, gating 685 million weekly downloads behind human approval. The move, prompted by a…
A developer released ctxfold, a dependency-free tool that losslessly compresses structured data like logs, JSON, and CSV in LLM prompts by re-encoding repetitive structure into a compact table format.…
Developer Roy Ashbrook released Hush, an open-source secret store for AI agents that injects credentials into commands without exposing plaintext values to stdout, transcripts, or the cloud. The tool …
Two distinct types of knowledge—procedural (skills) and declarative (facts)—must be formalized separately for AI agents, with skills distributed via package managers like apt and declarative knowledge…
Meta has open-sourced Astryx, a design system used internally for eight years that powers over 13,000 apps. The system provides 90+ accessible, themeable React components and is designed for both huma…
Microsoft Threat Intelligence reported that North Korean state-sponsored actor Sapphire Sleet compromised over 140 packages in the @mastra npm scope, targeting developers building AI coding tools. The…
Developer l-zhi released Pith, a local-first desktop LLM wiki that ingests notes, PDFs, and emails into Markdown entries without using vector databases or embeddings, relying instead on keyword search…
A Miasma worm variant infected 20 npm packages under the LeoPlatform organization on June 24, 2026, after an attacker compromised a single maintainer's tokens. The malicious payload, a polymorphic cre…
A developer warns that monorepos, while centralizing multiple packages and services, create a security blind spot because a single repository can contain many different dependency trees with varying r…
A supply-chain attack on the @mastra AI-agent ecosystem saw an attacker republish 141 packages with a malicious dependency that targeted crypto wallets. The incident highlights how AI coding tools lik…
A developer documented workarounds for breaking changes in Anthropic's Claude Code CLI tool, including pinning version 1.0.17, disabling auto-updates, and patching the `exit_plan_mode` popup to preven…
A developer created leak_probe.py, an 80-line Python tool that checks which secrets actually ship in an npm package versus those found in the git repository. Testing showed 6 secret hits in the repo b…