Cursor Origin — SpaceX's Bet Against GitHub Begins
··1592 words·8 mins
Cursor’s Origin beta coincided with a 7h 47m GitHub incident. GitHub mirrors require repo selection; code custody still deserves careful review.
- Osmond van Hemert — Senior Software Engineer & AI Product Builder/
- Blog Tags: Software Development, AI, Security & Infrastructure/
- Developer Tools/
Developer Tools
ChainDrop npm Worm — When Provenance Signs Malware
·1509 words·8 mins
ChainDrop poisoned hundreds of npm packages through legitimate release pipelines—proving valid SLSA provenance cannot guarantee safe source.
MCP Goes Stateless — Inside the July 28 Spec Overhaul
·1288 words·7 mins
MCP’s 2026-07-28 spec removes sessions and the initialize handshake, making the protocol stateless — here’s what changed and why it matters.
SpaceX Agrees to Acquire Cursor — $60B AI Coding Deal
··1440 words·7 mins
SpaceX’s June agreement valued Cursor at $60 billion in equity; the acquisition completed in August. What the merger means for AI coding tools.
Multi-Wave npm Supply Chain Attacks — IronWorm and Phantom Gyp
··1678 words·8 mins
A deep analysis of the coordinated multi-wave npm supply chain attacks (IronWorm, Phantom Gyp, Miasma, Shai-Hulud) that exposed thousands of developers and