The Shai-Hulud npm worm didn't fake its security check — it earned a legitimate one
An attacker compromised the GitHub account of keyv's maintainer and distributed poisoned versions across at least 868 packages with 1,381 total versions, accumulating over two billion monthly installs. The malicious releases carried valid provenance signatures that were legitimately earned rather than forged, presenting a new threat to supply chain security infrastructure.
Read full story →Why Lightspeed is going all-in on creator-led venture capital
Lightspeed Venture Partners hired Claire Zau, a seed investor with a major Instagram following, to build trust with next-generation founders. The move follows similar investments by a16z in Erik Torenberg's Turpentine podcast and OpenAI in TBPN, reflecting a trend of venture firms leveraging creators' influence.
Anthropic confirmed it is designing custom chips for Claude. It wants engineers who have “shipped silicon.”
Anthropic is designing custom silicon chips for its Claude AI model to improve performance and efficiency at scale. The company is building an internal team and seeking engineers with experience shipping silicon products.
Yann LeCun’s second attempt at a VC fund lands with $100M and Gemini’s co-lead as a partner
A venture capital fund called 224 Ventures launched with over $100 million in assets under management, with Yann LeCun and Oriol Vinyals as partners. Vinyals previously served as Gemini's co-technical lead at Google DeepMind before joining the new firm.