Mastodawn

RE: https://norden.social/@maik/116328948179344820

Artikel wie schon von Arstechnica. Die interessantere Frage ist wie lange es dauern wird bist auf dieser Basis Angriffe auf / mit / durch Claude Code gefahren werden. Und was für Effekte daraus zu sehen sein werden.

Abgesehen davon: Ich bin hier um mit Ihnen über das Wort Go...äh, OpenCode zu reden: https://opencode.ai/

Gleiches LLM coding, allerdings was Modelle angeht offen und inhärent gleich FOSS als Codebasis. Funktioniert auch mit Mistral, ist deutlich weiter entwickelt als Mistrals VibeCLI.
Kritik und Vorteile alle wie gehabt, mehr Auswahl und mehr Offenheit.

#ai #claude #claudecode #opencode #mistral #mistralvibe #codestral #devstral2 #devstral #llm #vibecoding

JTI 2h ago

Ars Technica 15h ago

Entire Claude Code CLI source code leaks thanks to exposed map file
512,000 lines of code that competitors and hobbyists will be studying for weeks.
https://arstechnica.com/ai/2026/03/entire-claude-code-cli-source-code-leaks-thanks-to-exposed-map-file/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

JTI 20h ago

RE: https://fosstodon.org/@ONLYOFFICE/116323756094840918

Quite the interesting fresh FOSS drama.
Curious to see how this will turn out. Two 🍺 on settlement.

Also, should the verdict go towards the Euro-Office fork will we see any precendence for other cases effectively weaking FOSS legal protection? Will distributors or integrators be impacted?

@Karlitschek being a clear FOSS native will surely have a proper strategy & plan forward laid out for this with his legal counsel. Or so one would hope.

Technically a pleasant product that one could only hope to be continued and advanced, ideally on combined man power of both parties.

#fossdrama #fosscompliance #onlyoffice #eurooffice #drama #foss #opensource

JTI 22h ago

daniel:// stenberg://1d ago

Hey OpenSSF, maybe talk to the peeps you work with and tell them to NOT do it like this: https://github.com/curl/wcurl/issues/90

JTI 22h ago

Josh Bressers 23h ago

The npm axios package was compromised. You know the drill

https://www.aikido.dev/blog/axios-npm-compromised-maintainer-hijacked-rat

axios compromised on npm: maintainer account hijacked, RAT deployed

Malicious axios versions 1.14.1 and 0.30.4 were published via a hijacked maintainer account. A hidden dependency deploys a cross-platform RAT. Check if you are affected and remediate now.

JTI 1d ago

Manuel Bissey 1d ago

TeamPCP highlights how supply chain attacks are fueling ransomware - compromise once, impact many. The attackers scale faster than defenders. 🔗💥 #SupplyChainSecurity #Ransomware

https://www.helpnetsecurity.com/2026/03/30/teampcp-supply-chain-attacks-ransomware/