PyPI does exactly that, and it's been very effective. Security partners can scan packages and use the invite-only API to report them:
https://blog.pypi.org/posts/2024-03-06-malware-reporting-evo...
Malware Reporting Evolved - The Python Package Index Blog
PyPI now has a new, improved way to report malware.
First time I've seen my
https://github.com/simonw/claude-code-transcripts tool used to construct data that's embedded in a blog post, that's a neat way to use it. I usually share them as HTML pages in Gists instead, e.g. w
https://gisthost.github.io/?effbdc564939b88fe5c6299387e217da...Useful context here is that the author wrote Pi, which is the coding agent framework used by OpenClaw and is one of the most popular open source coding agent frameworks generally.
Yeah, this new post is a continuation of that work.
Autoresearching Apple’s “LLM in a Flash” to run Qwen 397B locally
Here's a fascinating piece of research by Dan Woods, who managed to get a custom version of Qwen3.5-397B-A17B running at 5.5+ tokens/second on a 48GB MacBook Pro M3 Max despite …
Simon Willison’s WeblogLooks like it's Qwen3.5-397B-A17B so 17B active.
https://github.com/Anemll/flash-moe/tree/iOS-App
GitHub - Anemll/flash-moe at iOS-App
Contribute to Anemll/flash-moe development by creating an account on GitHub.
GitHubProfiling Hacker News users based on their comments
Here’s a mildly dystopian prompt I’ve been experimenting with recently: “Profile this user”, accompanied by a copy of their last 1,000 comments on Hacker News. Obtaining those comments is easy. …
Simon Willison’s WeblogEIR = Entrepreneur In Residence. It's a slightly odd position, and varies a little depending on the firm, but generally it means someone is employed by a VC firm for a period of time to work on developing their next idea and also help out around the VC firm sourcing deals and mentoring companies.
Their self-reported benchmarks have them out-performing pinecone by 7x in queries-per-second: https://zvec.org/en/docs/benchmarks/
I'd love to see those results independently verified, and I'd also love a good explanation of how they're getting such great performance.
I hadn't heard of Halvar Flake but evidently he's a well respected figure in security - https://ringzer0.training/advisory-board-thomas-dullien-halv... mentions "After working at Google Project Zero, he cofounded startup optimyze, which was acquired by Elastic Security in 2021"
His co-founder on optimyze was Sean Heelan, the author of the OP.

Advisory Board // Thomas Dullien "Halvar Flake"
Independent Security Researcher and Entrepreneur
Ringzer0