NPM supply chain compromised, GitLab layoffs, and AI hacking

A sophisticated supply-chain attack compromised 42 TanStack packages on the npm registry after an attacker exploited GitHub Actions vulnerabilities to publish 84 malicious versions. The breach chained a pull request exploit with cache poisoning and OIDC token extraction, prompting developers to review the official postmortem and audit their dependencies.

Researchers at UCLA Health have discovered the first drug capable of fully replicating the brain-repairing effects of physical stroke rehabilitation in mice. By successfully mimicking physical therapy in animal models, this breakthrough treatment offers a promising pharmaceutical alternative that could eventually revolutionize human stroke recovery.

A recent experiment explores the performance of running local AI models on a standard MacBook equipped with an M4 chip and 24GB of memory. The study aims to determine if this accessible hardware configuration can consistently produce practical and usable outputs for everyday tasks.

GitLab has announced a workforce reduction and the elimination of its CREDIT core values in a recent letter to customers and investors. The software development company stated that these structural changes are intended to streamline operations and better align with its current business priorities.

America Online has effectively dismantled its Nullsoft division by purging the team down to just three remaining employees. This drastic downsizing marks the abrupt end of an era for the prolific branch that significantly contributed to the software landscape between 1997 and 2004.

Google has introduced a new verification step for Gmail registration that requires users to send a text message. To create an account, users must now scan a QR code with their smartphone, which automatically triggers an SMS to Google to verify their phone number.

Ratty is a newly introduced terminal emulator that utilizes GPU rendering to support inline 3D graphics. This innovation allows developers to view and interact with complex 3D visuals directly within their standard command-line environment.

An 80-second rocket launch clip featuring James Burke continues to be celebrated as the greatest shot in television 45 years after its original broadcast. Because Burke only had a single chance to capture the scene perfectly, viewers often need multiple viewings to fully appreciate the technical mastery of the footage.

Anthropic withheld its new AI model, Mythos, from public release due to its exceptional ability to identify security vulnerabilities in source code. Demonstrating this advanced capability, the model has now successfully discovered a security flaw in curl.

A new technical guide demonstrates how to optimize large language model training in Swift by drastically accelerating matrix multiplication. By exploring ten handwritten implementations ranging from plain C and Swift to Apple's Metal API, the tutorial shows how developers can push performance from gigaflops per second up to teraflops per second.

After experiencing frequent sleep disruptions, an author utilized AI development tools to build a custom application that tracks and identifies the causes of nighttime awakenings. This project highlights how AI is lowering the barrier to entry, allowing individuals to easily create personalized tech solutions for everyday quality-of-life issues.

Despite the rise of AI code generators, industry professionals emphasize that software engineering is primarily about problem-solving, architecture, and understanding requirements rather than simply typing code. While developers who view their roles strictly as code writers may face obsolescence, those who adapt will transition into more complex roles where AI serves as a tool for rapid experimentation. Ultimately, delivering functional software still requires human critical thinking and contextual understanding that current AI models cannot fully replace.

Interfaze is a new model architecture designed to deliver high accuracy at scale across various applications. The release features comprehensive benchmark comparisons against leading foundational and specialist models, alongside practical code examples for optical character recognition, object detection, and web search.

A new Java 25 library called TypedMemory enables developers to efficiently map Java records to strongly typed off-heap native memory. By leveraging the Foreign Function and Memory API, the tool provides a fast and direct approach to native memory management for performance-critical applications.

A new technical report details the launch of AMÁLIA, an open-source large language model specifically designed for European Portuguese. This release marks a significant milestone in regional AI development and sets a promising direction for the future of specialized language models across Europe.

Papel is a new research app aiming to bring the TikTok experience to the discovery of scientific papers. The black-and-white platform allows users to easily find literature and read it using on-device AI. It also includes collaborative features so researchers can discuss their work with peers.

A recent experiment explores the real-time processing capabilities of large language models by tasking Claude Code with simulating a user-space IP stack. The study specifically measures the model's latency by tracking how quickly it can process and respond to standard network ping requests.

Researchers have developed three novel antibiotics using compounds derived from scorpion venom and habanero peppers. These new treatments could provide a crucial defense against tuberculosis and other drug-resistant bacterial infections.

The pioneering database software dBase has officially ended its nearly five-decade run, with its final newsgroup servers going offline in November 2025. The platform's ultimate demise was hastened by years of product neglect, complex vendor litigation, and the rapid rise of artificial intelligence.

This article explores the 19th-century evolution of snake oil, tracing its transformation from a traditional folk remedy to a mass-produced industrial medicine. The piece details how the product eventually lost its public credibility and became universally recognized as a fraudulent medical scam.