Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases... read more
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases... read more
Cloudways scaled from a bootstrapped startup to a leading managed PHP hosting service, encountering challenges with growing support load. Early on, Cloudways recognized the opportunity to implement an AI-based SRE agent to reduce the burden on support teams and provide faster diagnosis and resolutio.. read more

🚀 𝘗𝘰𝘴𝘵-𝘘𝘶𝘢𝘯𝘵𝘶𝘮 𝘊𝘳𝘺𝘱𝘵𝘰𝘨𝘳𝘢𝘱𝘩𝘺: Preparing for 𝘁𝗵𝗲 𝗡𝗲𝘅𝘁 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗘𝗿𝗮 Quantum computers are approaching, and with them comes a threat to traditional encryption like RSA and ECC. At 𝗥𝗘𝗟𝗜𝗔𝗡𝗢𝗜𝗗, we’re taking action now to ensure your infrastructure stays secure in a post-quantum world. How we’re prepar..
Earlier today (March 31, 2026), Anthropic accidentally shipped the full source code of Claude Code inside an npm package. The 512,000 lines of TypeScript have since been picked apart by the developer community, and what's inside is more revealing than anyone expected.

Anthropic shipped a source map file inside the latest npm release of Claude Code - and with it, the full source code of its flagship AI coding CLI. The leak exposed 512,000 lines of TypeScript across 1,900 files, 43 built-in tools, 44 feature flags, 26 hidden slash commands, and over 120 secret environment variables. It is one of the most detailed accidental exposures of a commercial AI product's internals to date.
