Huntress
Supply Chain Compromise of axios npm Package
An NPM supply chain attack struck the ubiquitous open-source axios library and Huntress has observed over a hundred affected devices.
Tuesday, 31 March 2026
Everything this site carried that day, newest first. Stories are kept for a month, and the widely covered ones for a year.
One Useful Thing (Ethan Mollick)
Claude Dispatch and the Power of Interfaces
We often lack the tools for the job, even if the AI is capable enough
Stripe / Shopify Eng / Netflix TechBlog / Dropbox Tech / Slack Eng / Spotify Eng
From Custom to Open: Scalable Network Probing and HTTP/3 Readiness with Prometheus
The Problem: Legacy Tooling and Its Limitations Currently, Slack utilizes a hybrid approach to network measurement, incorporating both internal (such as traffic between AWS Availability Zones) and external (monitoring traffic from the public internet into Slack’s infrastructure) solutions. These…
Google — The Keyword / AI / Research / DeepMind / Developers
Building better AI benchmarks: How many raters are enough?
Algorithms & Theory
Language blogs: Rust / Go / TypeScript / Swift / Kotlin / Java / .NET / Ruby / PHP / Elixir / ISO C++
What's new in Swift: March 2026 Edition
Welcome to “What’s new in Swift,” a curated digest of releases, videos, and discussions in the Swift project and community. Swift 6.3 has been released, expanding Swift into new domains and improving developer ergonomics. A highlight of its release is work to improve cross-platform build tooling…
Apple Developer News & Releases
App Store expands support to 11 new languages
To help your apps and games reach more people worldwide — especially in India — App Store Connect now supports localized metadata for 11 new languages, bringing the total number of supported localizations to 50. The new languages include Bangla, Gujarati, Kannada, Malayalam, Marathi, Odia, Punjabi…
Vercel (blog + changelog)
Axios package compromise and remediation steps
axios active supply chain attack Thenpm package was compromised in andiscovered on March 31, 2026. Vercel investigated this issue and implemented remediation actions to protect the platform. No Vercel systems were affected. axios@1.14.0 The npm registry removed the compromised package versions, and…
OpenAI News
Accelerating the next phase of AI
OpenAI raises $122 billion in new funding to expand frontier AI globally, invest in next-generation compute, and meet growing demand for ChatGPT, Codex, and enterprise AI.
Wiz Research
Axios NPM Distribution Compromised in Supply Chain Attack
A compromised axios maintainer account led to malicious npm releases that propagated across environments. Learn how to assess impact, detect compromise, and secure your development workflows.
Hugging Face Blog
Training mRNA Language Models Across 25 Species for $165
Vercel (blog + changelog)
Transfer Marketplace resources between teams
You can now transfer Marketplace resources between teams directly from the Vercel dashboard without relying on the API. This simplifies resource management during team or project changes. Both owner and member roles on the source and destination teams can initiate transfers. Prisma Neon Supabase…
Vercel (blog + changelog)
How FLORA shipped a creative agent on Vercel's AI stack
FLORA on Vercel 2x faster to production with their generation system Zero infrastructure debates after migration 50+ image models orchestrated AI SDK agent framework and itsprovides out-of-the-box primitives that power FAUNA's behavior (models, tool calling, and the interface layer for agent…
Google — The Keyword / AI / Research / DeepMind / Developers
Safeguarding cryptocurrency by disclosing quantum vulnerabilities responsibly
Algorithms & Theory
Apple Developer News & Releases
Updated Apple Developer Program License Agreement now available
The Apple Developer Program License Agreement has been revised to support new features, updated policies, and clarifications. Please review the changes and sign in to your account to accept the updated terms. Definitions, Section 3.3.3(B), Section 3.3.7(K): Specified requirements for use of the…
Hugging Face Blog
TRL v1.0: Post-Training Library Built to Move with the Field
Databricks / ClickHouse / DuckDB / Supabase / Neon / PlanetScale
ClickHouse BYOC on Google Cloud now Generally Available
Run ClickHouse in your own Google Cloud account : with full data sovereignty, zero-trust networking, and a managed control plane.