ChainDrop npm Worm: Fix Your Lockfile Before You Rotate Credentials
ChainDrop hit 444 npm packages and 2B monthly downloads. Here is the correct fix order — and why rotating credentials first triggers a ...
77 Evil Twin Extensions Hit Open VSX — Act Now
77 fake extensions harvested developer and CI data from Open VSX. If you use VS ...
GeoServer Zero-Day: No Patch, Active Exploits, Act Now
An unpatched SQL injection zero-day in GeoServer is being actively probed. No CVE, no patch. ...
Meta Muse Code Beta: What Developers Actually Get
Meta's terminal coding agent defaults to training on your code. Here's what Muse Code actually ...
Databricks $190B Valuation: CEO Says the Model Race Is Over
Databricks closed a $5 billion funding round yesterday at a $190 billion valuation — and ...
WordPress 7.1 Ships August 19: New APIs and What to Fix Now
WordPress 7.1 drops August 19. SVG Icon API, enforced iframed editor, Abilities API expansion — here is what developers need to test and ...
Stagehand v4: Browser Agent SDK Now 2x Faster
Stagehand v4 ships August 10 with an extension-based architecture that is 2x faster than Playwright. ...
DeepSeek Harness v0.1: Open-Source Agent, Plugin by Plugin
DeepSeek Harness v0.1 is live in developer preview — MIT-licensed, model-agnostic, and built on a ...
Jetpack Compose 1.12: Mesh Gradients, Wide Color, and the Build Upgrade You Can’t Skip
Jetpack Compose 1.12 is stable. Get mesh gradients, WCG support, and Grid named areas — ...
Lovable Hits $13.3B: What Vibe Coding Means for Devs
Lovable raised $400M at $13.3B valuation. 900M monthly visits, $600M ARR, Fortune 500 adoption. Here's ...