Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AIGit good with Epic Games' new open source VCS, Lore
Epic Games has open-sourced Lore, a centralized version control system originally developed as Unreal Revision Control for internal use and Fortnite development. Unlike Git and other VCS solutions, Lore treats binary files and text files as equals, making it purpose-built for game developers and other teams working with large binary assets alongside code. The system is released under the permissiv
AIMalicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats
A coordinated malware campaign has infiltrated the JetBrains Marketplace with 15 malicious plugins disguised as AI coding assistants. These plugins, which claim to leverage DeepSeek and other large language models for development tasks, are designed to steal AI provider API keys from developers. The threat extends to Chrome extensions that capture chatbot conversations, representing a significant
AIAgentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
Cybersecurity researchers at Tenet Security have identified a new attack vector called 'Agentjacking' that exploits AI coding agents to execute malicious code on developer systems. The attack leverages fake error reports through platforms like Sentry, an open-source error-tracking tool, to trick AI agents into running arbitrary code.
AIVS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
Microsoft is implementing a two-hour delay for automatic extension updates in Visual Studio Code as a security measure against supply chain attacks. The delay provides a window to detect and prevent malicious code from being automatically distributed to users through compromised extensions.
AIVoidZero is joining Cloudflare
Cloudflare has acquired VoidZero, the company behind popular JavaScript tooling including Vite, Vitest, Rolldown, and Oxc, with all team members joining Cloudflare. The company emphasizes that all VoidZero projects will remain open source, vendor-agnostic, and community-driven, with Cloudflare committing $1 million to a Vite ecosystem fund. The acquisition reflects Vite's growing importance as fou
AIZig creator seeks 'uncompromising perfection' before blessing 1.0
Zig programming language creator Andrew Kelley discussed his perfectionist approach to development in a JetBrains interview, explaining the language's 11-year pre-1.0 journey and strict no-AI policy. Kelley created Zig to address limitations in C, C++, Rust, and Go, aiming for C-level performance without memory safety pitfalls, while maintaining full backward compatibility only after achieving 'un