<h2>Must know</h2>
<ul>
<li><strong>Malicious LiteLLM versions on PyPI steal cloud credentials</strong>: PyPI issued an urgent warning regarding two malicious versions of LiteLLM (1.82.7 and 1.82.8) published by the TeamPCP group. These packages, which saw significant exposure due to LiteLLM’s 3 million daily downloads, embedded a three-stage payload designed to harvest SSH keys, AWS/GCP/Azure credentials, and Kubernetes configs. If you installed these versions during their two-hour window on March 25, 2026, immediate credential rotation is mandatory as data was exfiltrated via AES-256-CBC encryption. <a href="https://app.daily.dev/posts/kjJd6k0JC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GrapheneOS rejects age verification and threatens regional exit</strong>: The privacy-focused Android fork GrapheneOS announced it will not comply with emerging age verification laws in regions like the UK, Australia, and Brazil. Because the OS is designed to require zero personal identification or accounts at setup, the team stated they would rather exit these markets than compromise their core architecture. This stance complicates their recent partnership with Motorola, likely restricting the sale of GrapheneOS-powered hardware in those jurisdictions. <a href="https://app.daily.dev/posts/agWvIPypH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubernetes SIG Apps launches Agent Sandbox for AI workloads</strong>: The Kubernetes SIG Apps group introduced the Agent Sandbox project to address the limitations of traditional primitives like StatefulSets for AI agents. This new Custom Resource Definition (CRD) provides a declarative API for stateful workloads requiring instant startup and persistent identity, featuring a ‘SandboxWarmPool’ to eliminate cold starts. It supports secure runtimes like gVisor and Kata Containers, signaling a shift toward making Kubernetes a native platform for agentic AI. <a href="https://app.daily.dev/posts/wroMbko1c" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Arm debuts AGI CPU with 136 cores for AI data centers</strong>: The new 3nm silicon features Neoverse V3 cores and supports up to 6TB of DDR5-8800 memory for agentic AI infrastructure. <a href="https://app.daily.dev/posts/S5lBW0zAU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Poisoned documentation can hijack AI coding agents</strong>: Researchers demonstrated that lack of sanitization in documentation pipelines allows attackers to trick agents into installing malicious PyPI packages. <a href="https://app.daily.dev/posts/77SEcopfc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Load Balancer Controller adds Gateway API support</strong>: Version 3.1.0 replaces annotation-heavy configs with type-safe CRDs for Layer 4 and Layer 7 routing on EKS. <a href="https://app.daily.dev/posts/ELZeYfvNA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Hypura enables massive LLMs on limited Mac RAM</strong>: This Rust-based scheduler uses storage-tier-aware inference to run a 40GB Llama 70B on a 32GB M1 Max without crashing. <a href="https://app.daily.dev/posts/9m4QpgqvK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js 24.14.1 LTS fixes high-severity prototype pollution</strong>: The ‘Krypton’ security release addresses eight CVEs, including a critical fix for prototype pollution via HTTP headers. <a href="https://app.daily.dev/posts/EJVcsmjRO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel launches Elastic Build Machines in beta</strong>: The system automatically assigns Turbo, Enhanced, or Standard machines based on project complexity to optimize build costs. <a href="https://app.daily.dev/posts/2w3G0XlDk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious npm packages typosquat Solana and Ethereum libraries</strong>: Five packages under the ‘galedonovan’ account were found intercepting private keys and exfiltrating them to Telegram. <a href="https://app.daily.dev/posts/GAyQpSlSx" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The Jevons Paradox won’t save your developer job</strong>: Optimists are citing the 19th-century Jevons Paradox to claim that AI efficiency will create <em>more</em> developer jobs by exploding software demand. While it’s a comforting bedtime story for anxious engineers, it ignores the fact that ‘demand’ for software isn’t infinite and the ‘pivot’ usually involves senior devs spending all day auditing hallucinated garbage from Claude Code. Efficiency gains in coal didn’t turn every miner into a steam engine architect, and AI won’t turn every CRUD dev into a systems designer. <a href="https://app.daily.dev/posts/1powuaBgn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Apple’s Feedback Assistant is a bug-closing machine</strong>: A developer recently called out Apple for ignoring a network leak bug for three years, only to demand a ‘verification’ within two weeks or face closure. It’s a classic corporate tactic to artificially deflate open bug counts by burdening the reporter with the work Apple’s own QA should be doing. If the bug is still in the latest macOS beta, maybe try fixing it instead of playing administrative games with the people finding your leaks. <a href="https://app.daily.dev/posts/2hIqqorcX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI digital twins are the new nuclear magic wand</strong>: Microsoft and NVIDIA are touting AI and ‘digital twins’ as the solution to nuclear power’s permitting and construction nightmares. While Aalo Atomics claims a 92% reduction in permitting time, the marketing gloss conveniently skips over the actual regulatory and physical hurdles of building reactors. Calling a 4D simulation a ‘digital twin’ doesn’t change the fact that construction delays in nuclear are usually about concrete and politics, not a lack of generative AI document drafting. <a href="https://app.daily.dev/posts/5PimsVlpn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
