BY TOB4 MIN READ

Gemma 4 and Cursor 3 Drop Today: A Dev Roundup

Google's most capable open models hit the streets while Cursor goes all-in on agents. Here's what matters for developers.

BY TOB • 4 MIN READ

Axios Got Backdoored: What Developers Need to Know About the npm Supply Chain Attack

The popular HTTP client library Axios was compromised with a malicious dependency, affecting versions 1.14.1 and 0.30.4. Here's what happened and how to protect yourself.

BY TOB • 5 MIN READ

Someone Found a Live Malware Campaign on PyPI by Accident

A developer debugging a frozen laptop stumbled onto litellm 1.82.8, a weaponized package designed to steal SSH keys, AWS credentials, and just about everything else on your machine.