Bug fixes shipping to Grok Build 0.2.7 (release notes will be available in the TUI) • Wrap around on Up/Down in slash menu and history search • Restore subagent UI and replay on session resume • Fix Ctrl Delete on windows • Windows drag-and-drop screenshot images Ctrl/Alt V image input • Add Windows-friendly alternatives for Ctrl Enter / Ctrl ; • Strip base64 str images from read_file tool calls & pass as multimodal vision tokens • Share terminal backend, scheduler, monitor across subagent sessions • Image pipeline improvements (fix truncation, min pixels) • /login command to reauth from inside TUI • Add /usage • Handle Cmd A in prompt to select all text in ghostty

🚨 Ongoing supply chain attack on Composer packages! We just found multiple laravel-lang/* packages compromised on Packagist (lang, http-statuses, attributes). Payload runs at autoload time. At least 50 package versions were compromised. If you installed a compromised version, the malware already executed. Pin to a clean COMMIT (not version) and rotate secrets immediately. If your lockfile already had an older commit from before today, you are safe. But you should not update at the moment.

Unix’s man pages, universally feared yet indispensable, started as an unintended publishing project. Early Bell Labs engineers dreaded documenting their work, often leaving terse placeholders or vague ramblings for commands they figured no sane person would ever run anyway. But somehow, these rough scribbles became canonical scripture. Over the decades, man pages accumulated into an accidental opus of cryptic incantations and deadpan humor. Today, admins everywhere habitually type man commands knowing full well they’ll emerge confused, frustrated, and no wiser—but secretly loving every second of that masochistic ritual.

I see some weird things but this takes the biscuit. A vulnerability in the Companies House website, that let anyone view the private dashboard of any one of the five million registered companies, see directors' personal details. And modify them.