Developer tools news — AI coding assistants, IDEs, CLI tools, APIs, and productivity tools for software engineers. GitHub Copilot, Cursor, and more.
A security researcher known as ferstar documented that ZCode, an AI coding desktop app from Zhipu, silently packaged entire Git repositories—including full commit history and LFS assets—into encrypted archives and attemp…
A tutorial published on GitHub repository ritog/harmonic demonstrates training a Hamiltonian Neural Network to simulate the phase space of a harmonic oscillator — a rigid pendulum defined by mass m, rod length l, angle q…
Engineering manager jbreu published Autopoiesis, a proof-of-concept on GitHub that ships a fully configured AI platform inside a repository using containers, configs, and scripting in roughly 20 KByte of unoptimized over…
A developer published a demo showing how the OWASP Core Rule Set (CRS), running via Coraza inside Solo Enterprise for agentgateway, can inspect LLM prompts and MCP tool calls rather than just URLs and headers. The setup …
A developer benchmarked TypeSafe AI's Jev model on a 60-case agent tool-call risk classification task, finding both jev-latest and jev-preview at 91.7% accuracy with no statistically significant difference between them a…
Zizka-ai released ZizkaDB, an open-source, self-hosted audit trail for AI agents that logs each agent step with a parent_id so teams can trace a tool call or response back to its root cause. The stack ships via a Docker-…
StoreReady launched as a Show HN comparison tool that scores AI app builders on their ability to clear Apple App Store review, publishing head-to-head verdicts on six pairs including Rork vs Vibecode, Rork vs a0.dev, Vib…
GeaStack launched an open-source toolchain that compiles TypeScript, JSX, and CSS into C++ for embedded devices, desktop apps, and consoles, built on the Gea reactive web framework. The stack includes the geatsc TypeScri…
A GitHub fork of openai/codex published a 70-line shell script, aa.sh, that builds the Codex CLI from source by downloading prebuilt V8 artifacts. The script reads the pinned v8 version from Cargo.toml, fetches librusty_…
A developer built an offline Bengali voice dialer for Android to help an elderly, non-English-speaking parent place calls by speaking nicknames or phrases like "মাকে ফোন করো." After testing Whisper models in whisper.cpp—…
RuntimeWire's static analysis of Claude Desktop 2.2553.1 found an unreleased "Self-hosted execution" configuration that can redirect Code session traffic to an organization-specified HTTPS session host, with the app's ow…
Pirate Face launched a decentralized peer-to-peer mirroring service that converts open models from Hugging Face — including LLMs, image, audio, and datasets — into checksum-verified torrents, with each file carrying its …
The solo founder of AegisGate, an open-source self-hosted AI security gateway, tested the tool against 24 real-world adversarial prompts and found it blocked only 13, a 52.32% detection rate. The developer identified six…
Developer skorotkiewicz released chesslm, an open-source chess engine that pairs a 100,353-parameter NumPy neural network with a fixed material evaluator and alpha-beta search, using Stockfish only to supply training lab…
CleanCode launched as a canvas-based Agentic Development Environment (ADE) that gives each feature its own isolated Git worktree, canvas, terminals, execution scope, and Agent sessions, letting coding agents such as Clau…
Security firm Air Security disclosed on Thursday that a flaw it named Plugin4Shell lets an attacker who controls a plugin's code repository swap the plugin an AI coding agent installs for malicious code, even when the ma…
A developer built SkillPilot, a free, no-account web tool designed to help programmers escape "tutorial hell" by reducing decision fatigue around what to learn next. The developer attributes the common learning plateau n…
A developer built Neon Tic Tac Toe, a browser-based Tic Tac Toe game with a neon/cyberpunk interface, using HTML, CSS, and JavaScript. The project, which includes an AI opponent, was created to explore JavaScript game lo…
Geoff Huntley released preflight, a local proxy that scans OpenAI-compatible LLM requests and their attachments for secrets before they reach the model, running on 127.0.0.1:8081 in front of the underclass router on 127.…
Security researchers at Accomplish AI found two sandbox escapes in OpenAI's Codex coding agent, including one called Heapjack that achieves unsandboxed remote code execution on a developer's machine from Codex's strictes…