3–Aug 9, 2026

A fast-moving supply-chain attack compromised the npm package Keyv and hundreds of others, exposing developer workstations and CI systems to credential-stealing malware. Attackers used the GitHub account of Keyv maintainer Jared Wray to publish version 6.0.0 via GitHub Actions, bypassing safety verification despite valid provenance on npm. Dubbed a Shai-Hulud variant by Aikido Security, the worm spread to over 1,280 packages; affected teams should remove tainted releases, rotate credentials, and scan for unauthorized access.

In other security news, researchers uncovered a Linux kernel vulnerability in the TC packet editor (`tcf_pedit_act()`) that enables page cache corruption and root access in under a second. The exploit, named “Dirty Pedit,” leverages a u32 integer wraparound to bypass `skb_ensure_writable()` protections, allowing direct writes to page-cache-backed socket buffers.

AI safety took center stage with the introduction of the Minimal Standard for Safeguards v1.0 benchmark. Testing Claude Fable 5, GPT-5.6 Sol, Gemini 3.1 Pro, and Grok 4.5 against 67 jailbreak techniques and 360 high-risk goals revealed a 100x gap in robustness between models. Random search found 63 universal jailbreaks—prompts effective on over 75% of targets—highlighting inconsistent safeguards across frontier systems. Meanwhile, the cost of persistent agent memory emerges as a write-path challenge: each turn triggers LLM calls for extraction and deduplication, with extraction alone consuming 60–75% of memory spend.

Benchmark integrity also came under scrutiny. An audit of the SciCode scientific-coding benchmark uncovered 263 defects across 91% of its problems, falsely penalizing correct, instruction-following solutions and masking true model capability. Similarly, Alibaba’s Qwen 3.8-Max saw its claimed coding performance undercut when independent testing with tighter time budgets (45–60 minutes vs. up to 12 hours) dropped it from top-tier to mid-pack, underscoring how latency allowances can flip ranking tables.

For developers, PHP 8.6 (due November 2026) previewed partial function application, a Polling API for unified I/O multiplexing, property hooks on interfaces, and default values for readonly properties. A coding agent from RapidNative gained attention for using Lifo, an open-source TypeScript Linux engine, to run agent tool calls entirely inside a Vercel Function without VMs or sandboxes, leveraging a simulated filesystem and shell. On iOS, a deep dive into standalone PWAs confirmed that the `interactive-widget=resizes-content` meta tag is ignored by WebKit, forcing developers to use two-finger scroll detection to position chat composers above the keyboard.

Finally, hardware enthusiasts reverse-engineered Nvidia B200’s `tcgen05.mma` tensor-core instruction to bit-level accuracy by probing real silicon. The resulting software model corrected naive IEEE rounding assumptions that failed on 144 of 2,000 test cases, offering the first complete behavioral specification of the instruction beyond Nvidia’s sparse PTX documentation.