<h2>Must know</h2>
<ul>
<li><strong>CanisterWorm targets npm with ICP backed persistence</strong>: A self-spreading worm named CanisterWorm is currently infecting the npm ecosystem by stealing tokens via compromised GitHub Actions. Once active, it installs a persistent Linux backdoor and automatically republishes itself to every package the victim can access. The Command and Control infrastructure is hosted on the Internet Computer Protocol blockchain, making it nearly impossible to take down through traditional means. <a href="https://app.daily.dev/posts/nKe1S4RDg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel and Anthropic advance AI engineering workflows</strong>: Vercel has integrated Grok 4.20 into its AI Gateway, offering unified API access to reasoning and multi-agent variants. Simultaneously, Anthropic launched Claude Code Channels, enabling developers to interact with their CLI tool via Telegram and Discord using the Model Context Protocol. These releases signal a shift toward standardized, cross-platform agentic interfaces for production development. <a href="https://app.daily.dev/feed-by-ids?id=03LaAXXJF&amp;id=2O2HmWwMM&amp;id=3336MSPgf&amp;id=4MHUbwPOb&amp;id=GXHmCV2Pg&amp;id=IoV0luSh7&amp;id=Ryzsn8a9R&amp;id=Ur5RHzsG2&amp;id=bCQotnt4R&amp;id=eNry4HYqW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon challenges Nvidia with Trainium3 and AI hardware</strong>: Amazon’s Annapurna Labs is aggressively scaling its custom silicon, revealing that Anthropic now runs Claude on over one million Trainium2 chips. The upcoming 3nm Trainium3 chip aims for near-zero migration effort from PyTorch to break Nvidia’s software lock-in. Reports also suggest Amazon is secretly developing ‘Transformer,’ an AI-native smartphone designed to bypass traditional app stores entirely. <a href="https://app.daily.dev/feed-by-ids?id=LKzX6SwqJ&amp;id=HLSLTGctL&amp;id=ibpFpiXCR&amp;id=qNbywR4ri" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Flash MoE runs 397B parameter models on MacBooks</strong>: A new C/Metal engine achieves 4.4 tokens/second for Qwen3.5-397B on 48GB RAM by streaming active experts directly from SSD. <a href="https://app.daily.dev/posts/xsGaEEFUf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel Workflow adds automatic end to end encryption</strong>: The platform now uses AES-256-GCM and per-deployment keys to encrypt all step arguments and hook payloads by default. <a href="https://app.daily.dev/posts/0r6jV9CyY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Manyana introduces CRDT based version control</strong>: Created by Bram Cohen, this proof-of-concept ensures merges never fail by treating conflicts as annotations rather than blocking errors. <a href="https://app.daily.dev/posts/ErDrcgZ9t" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ZeroPath brings AI native vulnerability remediation</strong>: The YC S24 startup combines program analysis with LLMs to generate mergeable PR-level fixes for complex logic flaws like IDOR. <a href="https://app.daily.dev/posts/5p9F6EuUW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React Native adoption hits 80 percent for new architecture</strong>: The 2025 survey shows Expo Router and NativeWind are becoming the standard stack for 90% of the ecosystem. <a href="https://app.daily.dev/posts/3jRmoGbOi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Aurora DSQL expands with local playground and Go drivers</strong>: AWS’s serverless PostgreSQL now includes a browser-based playground and official pgx driver support for distributed workloads. <a href="https://app.daily.dev/posts/Un5GpVc7x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Floci emerges as a free LocalStack alternative</strong>: This lightweight AWS emulator starts in 24ms and supports 20+ services without requiring an auth token or subscription. <a href="https://app.daily.dev/posts/hbh0eKAmA" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Nvidia AI tokens are the new company scrip</strong>: Jensen Huang is floating the idea of paying engineers in ‘AI tokens’ worth half their salary, which is just a fancy way to inflate compensation packages with non-vesting, non-appreciating credits that only benefit Nvidia’s compute margins. It’s essentially the high-tech version of the 19th-century company store, except instead of flour and coal, you’re buying H100 runtime to do the job they’re already underpaying you for. <a href="https://app.daily.dev/feed-by-ids?id=03LaAXXJF&amp;id=2O2HmWwMM&amp;id=3336MSPgf&amp;id=4MHUbwPOb&amp;id=GXHmCV2Pg&amp;id=IoV0luSh7&amp;id=Ryzsn8a9R&amp;id=Ur5RHzsG2&amp;id=bCQotnt4R&amp;id=eNry4HYqW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elon Musk’s Terafab is another vaporware factory</strong>: Musk announced a ‘Terafab’ chip facility to power Tesla and SpaceX with zero timeline and zero semiconductor manufacturing experience. Given his track record with ‘Full Self-Driving’ and the ‘Tesla Bot,’ this looks like another attempt to pump stock by promising a vertical integration miracle that ignores the actual physics and supply chain reality of 3nm fabrication. <a href="https://app.daily.dev/feed-by-ids?id=HLSLTGctL&amp;id=ibpFpiXCR&amp;id=qNbywR4ri" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>H and R Block installs a TLS backdoor for fun</strong>: The 2025 Business tax software adds a root CA certificate and its private key to the Windows trusted store, effectively inviting man-in-the-middle attacks on your entire system. They’ve acknowledged the ‘issue’ but haven’t fixed it, and the certificate stays behind even after you uninstall the software, because nothing says ‘secure financial planning’ like a permanent security hole. <a href="https://app.daily.dev/feed-by-ids?id=0r6jV9CyY&amp;id=2h83ZvZOg&amp;id=5p9F6EuUW&amp;id=6dpZ7b6RS&amp;id=BuBHyicZm&amp;id=VfmEYbEde&amp;id=WlDoYxg0H&amp;id=fgbYMqxZM&amp;id=kDlR914eI&amp;id=nO5sBkcvm" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
