Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
Tech Times on MSN

Browser AI Gains Native Inference: Google LiteRT.js Cuts Server Dependency

Google LiteRT.js, released July 9, 2026, brings native browser AI inference to web developers by compiling Google's proven ...
InfoQ

Google's Genkit Ships Agents API with Detached Turns and Human-in-the-Loop for TypeScript and Go

Google released the Genkit Agents API in preview for TypeScript and Go. The open-source framework packages message history, ...
CSO Online

NPM ecosystem hit with two new supply chain compromises

Stolen and leaked credentials lead to Node.js packages from AsyncAPI and Jscrambler Code Integrity being poisoned with ...
Virtualization Review

Google Pushes AI Inference Out of the Cloud and Into the Browser

LiteRT.js runs machine learning models locally with CPU, GPU and emerging NPU acceleration, potentially reducing server infrastructure, inference charges and data movement.
Computerworld

Industry

Anthropic accuses Alibaba of using 25,000 fake accounts to scrape Claude AI The alleged campaign generated 28.8 million queries in a large-scale model-extraction effort to replicate AI capabilities.