VBAnimal

‼️🚨 BREAKING: A new npm supply-chain attack uses a dead-man's switch. The payload plants a watcher on your machine that nukes your home directory the second you revoke the GitHub token it stole from you. The compromise happened today, across 42 official tanstack npm packages, 84 malicious versions in total. tanstack/react-router alone pulls more than 12 million weekly downloads. The attacker forked TanStack's repository and pushed a single hidden commit. From there, they tricked TanStack's own release system into signing the malicious packages as if they were the real thing. To npm, and to anyone checking the cryptographic proof of origin (SLSA provenance), the poisoned versions looked 100% legitimate. Maintainer Tanner Linsley confirmed the whole team had 2FA enabled. It didn't matter. This is the first documented npm worm in history that ships with a valid, signed certificate of authenticity, the same one defenders rely on to know a package wasn't tampered with.

I extracted the gpt-image-2 watermark! testing it on different types of images now

@DataPolars Any feedback on that ? github.com/delta-io/delta…

Handling schema changes in Polars. Our latest blog post maps the four shapes of schema change (a new column appears, an expected one disappears, a type drifts, or one breaks) to the Polars solution that handles each, across CSV, multi-file Parquet, Delta Lake, and Apache Iceberg. Read the full breakdown here: pola.rs/posts/schema-e…

On form validation

@eshanbuilds @aakashgupta Dude i did not have 2h sleep a night for 3 fucking years cause of my baby. Yes, my brain is damaged. But that's not something extra-ordinary.

the part that gets buried under the method acting mystique: six prescription medications and two hours of sleep a night for months. chronic sleep deprivation at that level causes psychotic symptoms indistinguishable from the "intensity" people romanticize in this story. we keep framing actors destroying their health as dedication when the neuroscience says a brain running on 2 hours of sleep is a brain in clinical crisis. the performance was extraordinary. the process that produced it killed him. those aren't separate facts.

Heath Ledger's diary is the creepiest artifact in modern filmmaking. He locked himself in a hotel room for a month before filming The Dark Knight. No visitors. No calls. Taped pictures of clowns, hyenas, stills from A Clockwork Orange, and photos of Sid Vicious to the walls. Built the voice and the laugh alone in front of a mirror. Nobody on set saw any of it until the cameras rolled. He kept a diary written in the Joker's voice. Wrote in it every day for the entire shoot. The pages are full of jokes, character notes, doodles, photographs. His father Kim Ledger showed the diary on Australian television in 2012, four years after Heath died. The last two words written in it: "BYE BYE." The hospital scene was shot in late 2007. Heath died on January 22, 2008. He was 28. Accidental overdose of six prescription medications. The coroner noted he had not slept more than two hours a night for months. The film released in July 2008. He never saw a frame of his own performance. He won the Oscar posthumously, only the second actor in history to do so. Michael Caine forgot his lines the first time Heath appeared on set in full Joker. A 75-year-old actor with 130 films on his resume. His brain locked up. The diary is still in the family's possession. Nobody knows what day Heath wrote "BYE BYE."

🆕 Today, we're releasing the public preview of Workflows, the orchestration layer for enterprise AI. 🌎 Enterprise teams have capable models. What they don't have is a way to run them reliably in production. That's the gap Workflows fills. It takes AI-powered business processes from prototype to production, with the durability, observability, and fault tolerance that production actually requires. Leading organisations like ASML, ABANCA, CMA-CGM, France Travail, La Banque Postale, Moeve, and many others are already using Workflows to automate critical processes.

🚨 BREAKING: Wiz Research discovered Remote Code Execution on GitHub.com with a single git push The flaw in @github allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯

Gemini Embedding 2 is now generally available in the Gemini API and Vertex AI! Start building with our first natively multimodal embedding model, now equipped with the stability and optimizations required for production apps.

Imagine every pixel on your screen, streamed live directly from a model. No HTML, no layout engine, no code. Just exactly what you want to see. @eddiejiao_obj, @drewocarr and I built a prototype to see how this could actually work, and set out to make it real. We're calling it Flipbook. (1/5)

@DataPolars Speaking of sink_delta... That issue might interest you github.com/pola-rs/polars…

We've been busy in Q1 2026. 12 releases. 778 PRs. 95 contributors (thank you!). The streaming engine now covers more join types, all major formats have a streaming scan implementation, Delta and Iceberg both have full read/write support, and Polars Cloud gained a query profiler that helped us run a TPC-H benchmark 54% faster at 64% lower cost. Read all the highlights in the latest Polars in Aggregate: pola.rs/posts/polars-i…

@shawmakesmagic Hmm… the risk here (especially with DRY) is overengineering. Code clarity and maintainability can actually suffer as a result. I found that a few additions might help in this regard (simple is better than complex etc.). Still, nice work 👌

The quality of your vibecoded slop is horrible. I've seen it. Absolute dogshit. Fortunately, there is a fix. Use this prompt: I want to clean up my codebase and improve code quality. This is a complex task, so we'll need 8 subagents. Make a sub agent for each of the following: 1. Deduplicate and consolidate all code, and implement DRY where it reduces complexity 2. Find all type definitions and consolidate any that should be shared 3. Use tools like knip to find all unused code and remove, ensuring that it's actually not referenced anywhere 4. Untangle any circular dependencies, using tools like madge 5. Remove any weak types, for example 'unknown' and 'any' (and the equivalent in other languages), research what the types should be, research in the codebase and related packages to make sure that the replacements are strong types and there are no type issues 6. Remove all try catch and equivalent defensive programming if it doesn't serve a specific role of handling unknown or unsanitized input or otherwise has a reason to be there, with clear error handling and no error hiding or fallback patterns 7. Find any deprecated, legacy or fallback code, remove, and make sure all code paths are clean, concise and as singular as possible 8. Find any AI slop, stubs, larp, unnecessary comments and remove. Any comments that describe in-motion work, replacements of previous work with new work, or otherwise are not helpful should be either removed or replaced with helpful comments for a new user trying to understand the codebase-- but if you do edit, be concise I want each to do detailed research on their task, write a critical assessment of the current code and recommendations, and then implement all high confidence recommendations.

Google Stitch introduced a new concept: DESIGN . md Like README . md but for design systems. A plain markdown file that LLMs read to generate consistent UI. An awesome collection of DESIGN . md files inspired by developer-focused websites like Stripe, Vercel, Linear, Notion, Figma and more. Drop one into your project. Your AI coding agent builds the rest.

say hello to free-code claude code source code fully recompiled, telemetry stripped, security guardrails prompts stripped, all working experimental features enabled including ultraplan mode - a new async agentic planning mode where claude starts a multi-agent research session in the browser lasting between 10 and 30 minutes since i know there are gonna be DMCA strikes on this i've uploaded it on the blockchain on IPFS

I know you're all getting mighty tired of seeing typography on your timeline today! But here's a pretext.js demo that (hopefully) isn't a crime against justification and indentation.

Imaginez : vous tombez sur une page web suspecte, vous la soumettez à votre assistant IA pour vérifier si c'est safe. Il analyse le contenu, puis vous certifie que tout est clean. Sauf que le texte qu'il a lu dans le HTML et ce que votre navigateur affiche à l'écran n'ont strictement rien à voir. Des chercheurs en sécurité ont monté une attaque qui repose sur deux ingrédients : une font custom et un peu de CSS. Le tout sans JavaScript, sans exploit, sans faille. Et vous savez quoi ? Aucun assistant IA du marché n'a détecté la supercherie. lesjoiesducode.fr/police-caracte…

My dear front-end developers (and anyone who’s interested in the future of interfaces): I have crawled through depths of hell to bring you, for the foreseeable years, one of the more important foundational pieces of UI engineering (if not in implementation then certainly at least in concept): Fast, accurate and comprehensive userland text measurement algorithm in pure TypeScript, usable for laying out entire web pages without CSS, bypassing DOM measurements and reflow

A critical 9.8 CVSS zero-click flaw (ZDI-CAN-30207) hits Telegram, affecting 1 billion users. No interaction needed for full system hijack. Patching now! #Telegram #CyberSecurity #ZeroClick #InfoSec #ZDI #Vulnerability #Privacy #ZeroDay #DigitalPrivacy securityonline.info/telegram-criti…

@felixrieseberg @vite_js @tan_stack Why not pinia? Too recent for the IA to master well ? pinia.vuejs.org

A small ship I love: We made Claude.ai and our desktop apps meaningful faster this week. We moved our architecture from SSR to a static @vite_js & @tan_stack router setup that we can serve straight from workers at the edge. Time to first byte is down 65% at p75, prompts show up 50% sooner, navigation is snappier. We're not done (not even close!) but we care and we'll keep chipping away. Aiming to make Claude a little better every day.

Introducing TurboQuant: Our new compression algorithm that reduces LLM key-value cache memory by at least 6x and delivers up to 8x speedup, all with zero accuracy loss, redefining AI efficiency. Read the blog to learn how it achieves these results: goo.gle/4bsq2qI