‼️🚨 A new npm supply-chain attack compromised 57 packages across over 286 malicious versions in under 2 hours. The attackers used self-replicating malware, a new version of the Miasma worm, which also used evasion techniques to stay under the radar. The payload targets CI/CD and developer credentials, including GitHub Actions secrets, cloud credentials, Vault tokens, SSH keys, npm and GitHub tokens, and password-manager stores. This variant also injects AI coding assistant config files at `.claude`, `.cursor`, `.gemini`, and `.vscode` paths, a separate persistence and repo-poisoning angle.

We've raised $65 billion in Series H funding at a $965 billion post-money valuation, led by @AltimeterCap, Dragoneer, @Greenoaks, and @sequoia. This investment will help us advance our research and expand our capacity to meet growing demand for Claude.

Mozilla just officially confirmed the biggest Firefox redesign in YEARS. Project Nova is coming. And honestly? Firefox finally looks ready to fight back against Chrome again. Mozilla says Nova will bring: • faster performance • cleaner UI • redesigned tabs/icons • easier privacy controls • vertical tabs • split view • better accessibility • deeper customization • improved dark mode • built-in VPN visibility • AI kill switch controls The most interesting part: Mozilla specifically said this is a “renewal, not a replacement.” Meaning: they’re trying to modernize Firefox WITHOUT turning it into another Chrome clone. Performance is also getting major attention: Mozilla claims Firefox improved key page load times by 9% over the past year. And yes… Compact Mode is officially returning after community feedback. That alone tells you Mozilla is actually listening to power users again. You can already enable Nova right now in Firefox Nightly: browser.nova.enabled Honestly feels like Mozilla finally realized browser UI matters again.

🚨 BREAKING: Socket is investigating an active npm supply chain attack compromising hundreds of packages in the @antv ecosystem. The malicious publish wave appears tied to Mini Shai-Hulud and packages connected to the npm maintainer account atool.

today we launched ChatGPT. try talking with it here: chat.openai.com

HAVE THEY ADDED EASY MULTIPLAYER TO JAVA?????

Apple Developer app got an icon update

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments. The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran. To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.

BREAKING: Microsoft confirms a major Windows 11 release that focuses on performance, reliability, bug fixes, and bids goodbye to forced Windows Updates unwanted Copilot integration! Microsoft is seriously and sincerely improving Windows 11 by listening to top feedbacks: - Movable taskbar confirmed. - You can now pause Windows Updates for as long as you want. No forced shutdown/reboot when updates paused. - Windows Update is moving PCs to a single monthly reboot. - Faster File Explorer, reduced memory footprint, faster Windows Search, better OS performance, and other bug fixes - Scaling back Copilot in Windows 11, start with apps like Notepad - Moving Windows core experience to WinUI (native framework), dropping WebView/React in features like the Start menu - Fewer notifications (disruptions), improved drivers, and more. How do you want Microsoft to improve Windows 11? 👇

@Jonathan_Blow regarding software bloat outpacing hardware progress: found my 18y old Pentium II 400mhz laptop and fired up MS Word 98...

Today is Comic Sans Day.

i'd love to start it today but xcode is taking FOREVER to download the ios 26 beta sdk

i've been looking for good habit tracker for a while, but all the ones i tried were subscription based. guess i'll have to build my own app lol