Filtered to Dev tooling & infra · clear filter
Snyk reported discovering malware embedded in AI agent skills — the packaged, shareable capability bundles agents install to extend themselves. As skill marketplaces grow, they become a distribution channel for malicious code the same way package registries did. If you're wiring third-party skills into an agent, treat…
Source ↗Hugging Face detailed integrating Nunchaku's 4-bit quantized inference into the Diffusers library, cutting the memory and compute needed to run diffusion models. For anyone serving image generation on constrained hardware, native 4-bit support in the standard library lowers the barrier considerably. A practical…
Source ↗Simon Willison wrote up Nativ, a tool for running AI models locally on macOS. One more entry in the fast-growing local-inference tooling space developers are using to cut API costs and keep data on-device.
Source ↗OpenAI and Hugging Face jointly disclosed a security incident that occurred during model evaluation. Worth tracking if you run eval pipelines that touch third-party model hubs — details are still emerging.
Source ↗Block (Jack Dorsey) shipped Buzz, positioned as a single tool combining team chat, AI agents, and git hosting — announced on Block's own engineering blog and picked up widely (364+ points on HN). Another entrant in the "AI-native workspace that also does version control" category alongside the coding-agent IDEs; worth…
Source ↗OpenAI and Hugging Face jointly disclosed and addressed a security incident that occurred during a model evaluation run — among the top HN stories of the week at 1,500+ points. Details are still light on the exact mechanism, but it's a reminder that eval pipelines connecting frontier labs to model hubs are now…
Source ↗