Open source news — new project releases, community governance, licensing updates, and open-source AI models including Llama, Mistral, and others.
Five typosquatting npm packages published by accounts named "superbase" and "micresoft" contain a hidden 4.5 MB ELF binary that executes automatically upon `npm install` and, through a hijacked `SessionStart` hook, re-ex…
A JavaScript script called `tripo3d_model_downloader.js` that extracts 3D models from the Tripo3D.ai website. The script works by accessing the site's Vue 3 and TresJS/Three.js renderer components through the browser con…
Here is a factual summary of the article: Bun version 1.3.14 introduces a built-in `Bun.Image` API for server-side image processing, supporting formats like JPEG, PNG, WebP, and GIF with chainable transforms such as res…
Release of llm 0.32a2, highlighting that most reasoning-capable OpenAI models now use the `/v1/responses` endpoint instead of `/v1/chat/completions`, enabling interleaved reasoning across tool calls for GPT-5 class model…
The article accuses Bambu Lab of violating the open source social contract by threatening legal action against a developer who forked the AGPLv3-licensed OrcaSlicer to allow local printing without routing data through Ba…
The article describes a bug in Cloudflare's QUIC implementation (quiche) where the CUBIC congestion control algorithm's congestion window (cwnd) becomes permanently stuck at its minimum value after a period of heavy pack…
AI-assisted security scanners, when pointed at the curl project's codebase, were able to automatically demote certain findings by reading and applying curl's own vulnerability disclosure policy. The policy explicitly lis…
On May 11, 2026, a coordinated supply chain attack compromised over 170 npm packages and 2 PyPI packages, totaling 404 malicious versions, targeting major projects including the entire TanStack router ecosystem, Mistral …
The author, Johanna Larsson, describes her unconventional path into programming, which began with creating a simple website for her father's business using HTML and CSS, sparking a lasting passion for building software. …
Convergent infrastructure requirements for the foundation model lifecycle—including tightly coupled accelerator compute, high-bandwidth networking, and distributed storage—and highlights the growing reliance on open-sour…
Traditional intrusion detection systems (IDS) like Snort rely on specific signatures, which creates a critical gap in coverage for novel or modified attacks during the exposure window before a new rule is written and dep…
Stack Overflow has launched "The Heap," a new community blog that invites software engineers and technologists to submit their own articles about their work and insights, building on the success of previous reader-contri…
TokenZip v2 is a token compression engine that reduces LLM input token costs by up to 95% for coding copilots like Claude Code and Codex by transforming an entire codebase into a multi-level, queryable knowledge graph st…
The article describes the author's successful setup for running local AI models on an M4 Mac with 24GB of memory, specifically highlighting Qwen 3.5-9B (Q4 quantized) as the best performing model at ~40 tokens per second…
Wander Console 0.6.0, the sixth release of the decentralized web console, has been published. The primary change is the complete removal of the `via` referral query parameter from recommended URLs, as it was found to be …
On April 29, 2026, the Linux kernel vulnerability "Copy Fail" (CVE-2026-31431) was publicly disclosed, prompting Cloudflare's security teams to assess the exploit technique and evaluate their infrastructure for exposure.…
BASIC program example for the C64U (Commodore 64 Ultimate) interface that demonstrates how to perform an HTTP GET request. The code constructs a request to httpbin.org, opens a TCP connection, sends the request, and read…
This article provides a step-by-step guide for upgrading a Fedora WSL instance from version 43 to 44, using `dnf system-upgrade` and `dnf5 offline reboot`. After the upgrade, it instructs users to manually rename the WSL…
Here is a 2-3 sentence factual summary of the article: The article describes the process of migrating an online reinforcement learning (RL) training system from the vLLM V0 engine to the V1 rewrite, prioritizing backend…
After the retirement announcement of Ingress-NGINX, Stack Overflow was forced to replace the tool that had handled their Kubernetes traffic routing since their move to the platform. They evaluated several Gateway API and…