Microsoft

From package to postinstall payload: Inside the Mastra npm supply chain compromise by ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
InfoWorld

10 tips for getting better R code from your AI coding agent

With the proper setup and guidance, you can have Claude Code, Codex, Posit Assistant, and other coding agents writing R code ...
The Hacker News

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.
Tech Times

Figma Config 2026: Code Layers Challenge Cursor as GPU Shaders Hit Paid Plans

Figma Config 2026 closed Thursday with Code Layers for GitHub-linked canvas editing, Figma Motion in open beta with CSS and ...
Tech Times

npm v12 Security Overhaul Blocks Install Scripts by Default: July Deadline for CI Migration

July 2026, blocking install scripts, Git dependencies, and remote URL sources by default. Every team running npm install in ...

I let Claude audit my messy Home Assistant setup, and it was a massive wake-up call

I gave Claude access to my Home Assistant. It helped me audit, debug, and improve my smart home better than I ever could have ...
InfoQ

Azure Functions Ships Serverless Agents Runtime at Build 2026

Azure Functions shipped a serverless agents runtime in public preview at Build 2026. Agents are defined in .agent.md markdown ...

Homebrew 6.0.0が公開される、サードパーティーtapの信頼確認を導入しセキュリティ強化へ

macOSやLinux向けのパッケージ管理ツール「Homebrew」の最新版となるHomebrew 6.0.0が2026年6月11日に公開されました。サードパーティーtapの信頼確認を求める「tap trust」、内部JSON APIの標準での有効化、Linux向けサンドボックス、brew bundleの改善、パフォーマンス向上、macOS 27「Golden Gate」への初期対応などのアップデ ...

「Codex」に開発者モード、Chrome DevTools Protocol（CDP）に接続、Web ...

米OpenAIは6月12日（日本時間）、「Codex」アプリに「開発者モード」（developer mode）を導入したと発表した。「Google Chrome」のブラウザー操作（Browser ...