Developer Tools

Cursor launched its GitHub rival, Origin, hours before a global GitHub outage — and left the real questions about who now holds your source code unanswered.

ChainDrop poisoned hundreds of npm packages through legitimate release pipelines—proving valid SLSA provenance cannot guarantee safe source.

MCP’s 2026-07-28 spec removes sessions and the initialize handshake, making the protocol stateless — here’s what changed and why it matters.

SpaceX just acquired Cursor for $60 billion in an all-stock deal that signals the beginning of major consolidation in the AI coding tools market.

A deep analysis of the coordinated multi-wave npm supply chain attacks (IronWorm, Phantom Gyp, Miasma, Shai-Hulud) that exposed thousands of developers and