Today's digest · Friday, June 12

The 14 things in AI/dev today.

LiveNext issue at 7:00 CET
#1 / TODAY
Hacker News·1 min·64d agoFREE

Show HN: Homebrew 6.0.0

Homebrew 6.0.0 introduces tap trust, a security mechanism requiring third-party taps to be explicitly trusted before code execution, reducing risk from malicious taps. The internal JSON API becomes default for faster updates. Linux sandboxing via Bubblewrap aligns with macOS. Ask mode is now default for developers, showing dependency summaries before installs.

Tap trust reduces risk from malicious third-party taps by requiring explicit trust before code execution.

homebrewsecuritypackage-managermacos
brew.sh
Show HN: Homebrew 6.0.0
GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
#2 / TOP STORY
The Hacker NewsFREE

GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

GitHub announced it will disable npm install scripts by default to prevent supply chain attacks. The change aims to stop malicious packages from executing arbitrary code during installation. Developers will need to explicitly enable scripts for trusted packages, reducing the risk of automated malware deployment via compromised dependencies.

Hundreds of AUR packages attacked by infostealer
#3 / TOP STORY
LobstersFREE

Hundreds of AUR packages attacked by infostealer

An Arch Linux AUR mailing list thread reports that hundreds of AUR packages have been attacked by an infostealer. The maintainer Jonathan Grotelüschen states they are working to reset or delete malicious commits and ban the accounts involved. Users are asked to reply to the thread with any additional malicious packages found.

aigest · daily

Get this every morning.

One email. The signal. Built for builders.

Free · Unsubscribe in one click · No trackers

// Worth acting on4 stories
// Worth knowing7 stories

Developers may be pressured to adopt LLMs without evidence of real productivity gains.

llmworkplacehypeskepticism
Lobsters64d ago1mFREE
// Yesterday11 stories