Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AICloudflare AI Search: give your agents a search engine for your data
Cloudflare has enhanced its AI Search platform to simplify deployment of search solutions for AI agents, eliminating the need to manually integrate multiple Cloudflare primitives. The service now offers automatic indexing, public endpoints for multi-instance searching, custom domain support, and predictable pricing with free embedding and reranking when using default models. Cloudflare demonstrate
AIOpen VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
Open VSX marketplace removed 77 malicious extensions that impersonated legitimate developer tools to exfiltrate data about developers' systems and environments. The 'evil twin' extensions were uploaded between July 26 and August 1, 2026, and have since been removed following discovery by Manifold Security.
AI18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
Cybersecurity researchers have identified 18 malicious npm packages targeting Alibaba developer tool users with a cross-platform remote access trojan (RAT). The attack represents a sophisticated software supply chain compromise specifically aimed at Chinese-speaking development environments, with one package named 'lib-mtop' mimicking a legitimate private Alibaba package.
AIYour agent needs a computer, not a container — introducing @cloudflare/computer
Cloudflare has introduced @cloudflare/computer, an open-source package that provides agents with a unified compute environment combining isolates and containers with a shared filesystem. The solution addresses scalability challenges in agentic AI systems by leveraging Cloudflare's isolate technology, which can scale horizontally to support billions of concurrent agents more efficiently than tradit
AIBringing more agent harnesses and frameworks to Cloudflare, starting with Flue
Cloudflare is launching its Agents SDK as a foundational platform layer for production-grade AI agents, addressing distributed systems challenges like durable execution, state management, and secure code execution. The company introduces Flue, an open-source agent framework built on the Pi harness, which offers a declarative approach to building agents with built-in integrations for enterprise too
AIGit good with Epic Games' new open source VCS, Lore
Epic Games has open-sourced Lore, a centralized version control system originally developed as Unreal Revision Control for internal use and Fortnite development. Unlike Git and other VCS solutions, Lore treats binary files and text files as equals, making it purpose-built for game developers and other teams working with large binary assets alongside code. The system is released under the permissiv
AIMalicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats
A coordinated malware campaign has infiltrated the JetBrains Marketplace with 15 malicious plugins disguised as AI coding assistants. These plugins, which claim to leverage DeepSeek and other large language models for development tasks, are designed to steal AI provider API keys from developers. The threat extends to Chrome extensions that capture chatbot conversations, representing a significant
AIAgentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
Cybersecurity researchers at Tenet Security have identified a new attack vector called 'Agentjacking' that exploits AI coding agents to execute malicious code on developer systems. The attack leverages fake error reports through platforms like Sentry, an open-source error-tracking tool, to trick AI agents into running arbitrary code.
AIVS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
Microsoft is implementing a two-hour delay for automatic extension updates in Visual Studio Code as a security measure against supply chain attacks. The delay provides a window to detect and prevent malicious code from being automatically distributed to users through compromised extensions.
AIVoidZero is joining Cloudflare
Cloudflare has acquired VoidZero, the company behind popular JavaScript tooling including Vite, Vitest, Rolldown, and Oxc, with all team members joining Cloudflare. The company emphasizes that all VoidZero projects will remain open source, vendor-agnostic, and community-driven, with Cloudflare committing $1 million to a Vite ecosystem fund. The acquisition reflects Vite's growing importance as fou
AIZig creator seeks 'uncompromising perfection' before blessing 1.0
Zig programming language creator Andrew Kelley discussed his perfectionist approach to development in a JetBrains interview, explaining the language's 11-year pre-1.0 journey and strict no-AI policy. Kelley created Zig to address limitations in C, C++, Rust, and Go, aiming for C-level performance without memory safety pitfalls, while maintaining full backward compatibility only after achieving 'un