Alexander Wallin✌️

List of Compromised Packages of Active NPM Supply Chain Attack - Mini Shai-Hulud (May 11, 2026) @tanstack/react-router 1.169.5, 1.169.8 @tanstack/vue-router 1.169.5, 1.169.8 @tanstack/solid-router 1.169.5, 1.169.8 @tanstack/router-core 1.169.5, 1.169.8 @tanstack/react-start 1.167.68, 1.167.71 @tanstack/router-plugin 1.167.38, 1.167.41 @tanstack/eslint-plugin-router 1.161.9, 1.161.12 @tanstack/eslint-plugin-start 0.0.4, 0.0.7 @tanstack/history 1.161.9, 1.161.12 @tanstack/nitro-v2-vite-plugin 1.154.12, 1.154.15 @tanstack/arktype-adapter 1.166.12, 1.166.15 @tanstack/react-router-devtools 1.166.16, 1.166.19 @tanstack/react-router-ssr-query 1.166.15, 1.166.18 @tanstack/react-start-client 1.166.51, 1.166.54 @tanstack/react-start-rsc 0.0.47, 0.0.50 @tanstack/react-start-server 1.166.55, 1.166.58 @tanstack/router-cli 1.166.46, 1.166.49 @tanstack/router-devtools 1.166.16, 1.166.19 @tanstack/router-devtools-core 1.167.6, 1.167.9 @tanstack/router-generator 1.166.45, 1.166.48 @tanstack/router-ssr-query-core 1.168.3, 1.168.6 @tanstack/router-utils 1.161.11, 1.161.14 @tanstack/router-vite-plugin 1.166.53, 1.166.56 @tanstack/solid-router-devtools 1.166.16, 1.166.19 @tanstack/solid-router-ssr-query 1.166.15, 1.166.18 @tanstack/solid-start 1.167.65, 1.167.68 @tanstack/solid-start-client 1.166.50, 1.166.53 @tanstack/solid-start-server 1.166.54, 1.166.57 @tanstack/start-client-core 1.168.5, 1.168.8 @tanstack/start-fn-stubs 1.161.9, 1.161.12 @tanstack/start-plugin-core 1.169.23, 1.169.26 @tanstack/start-server-core 1.167.33, 1.167.36 @tanstack/start-static-server-functions 1.166.44, 1.166.47 @tanstack/start-storage-context 1.166.38, 1.166.41 @tanstack/valibot-adapter 1.166.12, 1.166.15 @tanstack/virtual-file-routes 1.161.10, 1.161.13 @tanstack/vue-router-devtools 1.166.16, 1.166.19 @tanstack/vue-router-ssr-query 1.166.15, 1.166.18 @tanstack/vue-start 1.167.61, 1.167.64 @tanstack/vue-start-client 1.166.46, 1.166.49 @tanstack/vue-start-server 1.166.50, 1.166.53 @tanstack/zod-adapter 1.166.12, 1.166.15 @uipath/access-policy-sdk 0.3.1 @uipath/access-policy-tool 0.3.1 @uipath/admin-tool 0.1.1 @uipath/agent-sdk 1.0.2 @uipath/agent-tool 1.0.1 @uipath/aops-policy-tool 0.3.1 @uipath/ap-chat 1.5.7 @uipath/api-workflow-tool 1.0.1 @uipath/apollo-core 5.9.2 @uipath/apollo-wind 2.16.2 @uipath/auth 1.0.1 @uipath/case-tool 1.0.1 @uipath/cli 1.0.1 @uipath/codedagent-tool 1.0.1 @uipath/codedagents-tool 0.1.12 @uipath/codedapp-tool 1.0.1 @uipath/common 1.0.1 @uipath/context-grounding-tool 0.1.1 @uipath/data-fabric-tool 1.0.2 @uipath/docsai-tool 1.0.1 @uipath/filesystem 1.0.1 @uipath/flow-tool 1.0.2 @uipath/functions-tool 1.0.1 @uipath/gov-tool 0.3.1 @uipath/identity-tool 0.1.1 @uipath/insights-sdk 1.0.1 @uipath/insights-tool 1.0.1 @uipath/integrationservice-sdk 1.0.2 @uipath/integrationservice-tool 1.0.2 @uipath/llmgw-tool 1.0.1 @uipath/maestro-sdk 1.0.1 @uipath/maestro-tool 1.0.1 @uipath/orchestrator-tool 1.0.1 @uipath/packager-tool-apiworkflow 0.0.19 @uipath/packager-tool-bpmn 0.0.9 @uipath/packager-tool-case 0.0.9 @uipath/packager-tool-connector 0.0.19 @uipath/packager-tool-flow 0.0.19 @uipath/packager-tool-functions 0.1.1 @uipath/packager-tool-webapp 1.0.6 @uipath/packager-tool-workflowcompiler 0.0.16 @uipath/packager-tool-workflowcompiler-browser 0.0.34 @uipath/platform-tool 1.0.1 @uipath/project-packager 1.1.16 @uipath/resource-tool 1.0.1 @uipath/resourcecatalog-tool 0.1.1 @uipath/resources-tool 0.1.11 @uipath/robot 1.3.4 @uipath/rpa-legacy-tool 1.0.1 @uipath/rpa-tool 0.9.5 @uipath/solution-packager 0.0.35 @uipath/solution-tool 1.0.1 @uipath/solutionpackager-sdk 1.0.11 @uipath/solutionpackager-tool-core 0.0.34 @uipath/tasks-tool 1.0.1 @uipath/telemetry 0.0.7 @uipath/test-manager-tool 1.0.2 @uipath/tool-workflowcompiler 0.0.12 @uipath/traces-tool 1.0.1 @uipath/ui-widgets-multi-file-upload 1.0.1 @uipath/uipath-python-bridge 1.0.1 @uipath/vertical-solutions-tool 1.0.1 @uipath/vss 0.1.6 @uipath/widget.sdk 1.2.3 @mistralai/mistralai 2.2.2, 2.2.3, 2.2.4 @draftauth/client 0.2.1, 0.2.2 @draftauth/core 0.13.1, 0.13.2 @draftlab/auth 0.24.1, 0.24.2 @draftlab/auth-router 0.5.1, 0.5.2 @draftlab/db 0.16.1, 0.16.2 @beproduct/nestjs-auth 0.1.2-0.1.16 @dirigible-ai/sdk 0.6.2, 0.6.3 @ml-toolkit-ts/preprocessing 1.0.2, 1.0.3 @ml-toolkit-ts/xgboost 1.0.3, 1.0.4 @supersurkhet/cli 0.0.2-0.0.5 @supersurkhet/sdk 0.0.2-0.0.5 @taskflow-corp/cli 0.1.24-0.1.27 @tolka/cli 1.0.2 @opensearch-project/opensearch 3.6.2 agentwork-cli 0.1.4, 0.1.5 cmux-agent-mcp 0.1.3-0.1.6 git-branch-selector 1.3.3 git-git-git 1.0.8 ml-toolkit-ts 1.0.4, 1.0.5 nextmove-mcp 0.1.3 safe-action 0.8.3, 0.8.4 PyPI: guardrails-ai 0.10.1, mistralai 2.4.6

@sepivip @bcherny Would love this 👌

@bcherny Hey Boris. I'm working on several workstations. The biggest productivity boost would be to have something similar for all sessions from all workstations, including IDE, terminal, and app. Is something like this planned?

The best way to level up from 1 agent => many agents. No more cycling between terminal tabs

@bcherny This is what I have been waiting for 🙌

@thefox Nice 👍

Whenever I post about the new Google Finance, I get one big question: “When's it coming to Europe?!” Excited to share the answer is now! We're shipping it across Europe this week with local language support. Enjoy AI-powered research, advanced visualizations & live earnings!🚀

@jack In the CLI version. Please set “shift enter” as default for new line. This killed my experience of goose. I’m willing to try again when fixed.

people are sleeping on how excellent goose has become under the hood (interface needs some work but team is pushing). it's a superpower. github.com/block/goose

@bcherny Keep but the good work Boris! I would love this feature. Does it only work for max plan or can I use my API key?

Have been using this daily and loving it! Tell us what you think

The Chargers’ soon-to-be OC now gets two annual chances to troll Maxx Crosby. Mike McDaniel mic’d up. 🔥

@elonmusk Nice 🔥 Ping @robertpohl @AshPournouri

Latency good enough to play FPS games on an airplane!

@TheDirector_YT Nooo body ! ⚡️

Bro.. HOW ARE WE 11-4 RN WHAT?! ⚡️⚡️⚡️⚡️⚡️⚡️⚡️⚡️⚡️⚡️⚡️⚡️ WHO’S GOT IT BETTER THAN US?!

🔥

@guilleflorvs That’s Hamilton Helmer’s 7 Powers of business strategy. 🔥

YC just laid out the 7 most powerful moats for AI startup 👇 Here’s the founder-friendly version you should have in your head before you ship your next feature: 0) The moat before all moats: SPEED In the beginning you don’t need a moat. You need to move faster than anyone else can. Cursor-style: short sprints, ship daily, learn in public. 1) Process Power The “boring” 10% that takes 90% of the work. Evals, monitoring, recovery flows, compliance, edge cases. If it’s mission-critical and you make it production-grade, it becomes hard to copy. 2) Cornered Resource Something others can’t easily get: proprietary data, relationships, distribution, regulatory access, domain embedding. Not “we fine-tuned a model.” More like “we own the workflow and the labels of what good looks like.” 3) Switching Costs AI will lower old switching costs (agents can migrate data). But it raises new ones when your agent becomes the customer’s operating system (custom logic + integrations + trust built over months). 4) Counter-Positioning Do what incumbents can’t afford to do. Example: per-seat SaaS vs task-based pricing (AI reduces seats, which kills their revenue model). Or second movers winning by focusing on the application layer and shipping a better product. 5) Brand When customers pick you even at parity. “ChatGPT” became the verb. That’s not a feature. That’s compounding advantage. 6) Network Effects (AI-style) Usage → data → better evals/models → better product → more usage. Not “social graph.” More like “feedback loops that competitors can’t replicate without your volume.” 7) Scale Economies Pay big fixed costs once (infra, data, integrations, compliance) and amortize across many customers. The YC punchline: Don’t use “moats” to talk yourself out of starting. Pre-product, you have nothing to defend. Find a hair-on-fire pain, ship fast, then deliberately deepen 1–2 moats.

@MarioNawfal @klarnaseb jag ser lösningen på nya SL linjen komma närmare 🙌

🚨🇺🇸 THE BORING COMPANY JUST MADE TUNNELS CHEAPER THAN HIGHWAYS U.S. cities pay $1.4 billion per mile for tunnels. New York's next tunnel? $4 billion per mile. The Boring Company does it for $10 million. Future target: $4 million. They're building tunnels 140x cheaper than the urban average. They've even beaten the cost of building highways above ground. Cities have been locked out of subway expansion for decades because tunnel costs are insane. $2.5 billion per mile means politicians can't justify it, so traffic gets worse while infrastructure rots. Elon's pitch: Buildings are 3D. Transport needs to be 3D to solve congestion. Many layers of tunnels underground to match the many floors above. The play: If Boring hits that $4M/mile target, every major city can afford multi-layer tunnel networks. Traffic becomes a solved problem - not in 50 years, in the next decade. Las Vegas already has a functional Loop. Miami, Austin, and others are next. Welcome to infrastructure that actually gets built. Source: @boringcompany, @elonmusk

@FrankSchuil @klarnaseb Really? When did they start to govern in the US 🇺🇸 ? 😬

No one will escape the clutches of FI @klarnaseb 🤭di.se/digital/fi-kla…

Pitch me your startup in 0 words

@Aladey PodiBud.com

Phase 3. Drop your domain in the comments 👇 My AI agent will appraise it. 📷🤖

@dipak_gadhiya @CodeByNZ Ditto

@CodeByNZ Copilot or I quit.

What’s that one extension you can’t live without when coding?

Once you start using white theme, there's no going back.

@minchoi @dedene VibeHacking

@dedene vibe attack

This story is wild Chinese state-backed hackers hijacked Claude Code to run one of the first AI-orchestrated cyber-espionage Using autonomous agents to infiltrate ~30 global companies, banks, manufacturers and government networks🤯 How the attack was carried out in 5 phases

So it begins

@DannyNoonanGolf @NFL_DovKleiman I concur

@NFL_DovKleiman Myles Garrett in Cleveland

Explain in NFL terms: