<h2>Must know</h2>
<ul>
<li><strong>Supply chain attacks hit LiteLLM and AI infrastructure</strong>: A sophisticated supply chain attack recently targeted the LiteLLM package on PyPI, involving base64-encoded payloads and orphaned Python processes. This coincides with a broader surge in attacks on CI/CD pipelines, where threat actors like TeamPCP are exfiltrating credentials to fuel large-scale ransomware operations. Security researchers from Sonatype also warn that AI-generated dependency advice from models like GPT-5 is frequently hallucinated, leaving critical vulnerabilities unaddressed. <a href="https://app.daily.dev/feed-by-ids?id=DtWPHeTcL&amp;id=HSRYHyvSY&amp;id=KM5ci0LyS&amp;id=PfVtSaby4&amp;id=RgBM7VgFk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel launches Generative UI framework for AI interfaces</strong>: Vercel has open-sourced json-render, a framework designed to let AI models compose structured user interfaces at runtime using natural language prompts. By defining component catalogs with Zod schemas, developers can allow LLMs to generate constrained JSON that renders progressively across React, Vue, and Svelte. While InfoQ reports mixed community reactions regarding the necessity of a new standard, the move signals a shift toward dynamic, AI-driven interface composition. <a href="https://app.daily.dev/posts/msfA6nj8a" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React invariants and the physics of async UI</strong>: SolidJS creator Ryan Carniato argues that React’s most criticized patterns—deferred state commits and explicit dependency arrays—are actually unavoidable ‘physics’ for any UI framework handling asynchronous state. In a deep dive into Solid 2.0’s architecture, he explains that maintaining synchronous consistency requires isolating async work from the commit phase. This suggests that even fine-grained reactive frameworks must eventually adopt React-like constraints to ensure predictable rendering. <a href="https://app.daily.dev/posts/oXQQ8zxuy" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>TermUI brings shadcn style components to the terminal</strong>: A new TypeScript framework uses Ink and Yoga flexbox to build CLI interfaces with familiar React patterns and copy-paste components. <a href="https://app.daily.dev/posts/TbcnCEMPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Safari Technology Preview 240 adds revert-rule support</strong>: The latest release includes the <code>revert-rule</code> CSS keyword, subpixel inline layout for text, and improved contrast tools in the Web Inspector. <a href="https://app.daily.dev/posts/jaZRnBrY9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Inertia.js v3.0 drops Axios for a custom XHR client</strong>: The major update introduces a <code>useHttp</code> hook, first-class optimistic updates, and a Svelte 5 adapter while reducing bundle sizes. <a href="https://app.daily.dev/posts/WWmxp0DEw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KubeVirt v1.8 introduces hypervisor abstraction</strong>: The release adds support for non-KVM backends, Kubernetes 1.35, and PCIe NUMA topology awareness for AI-heavy virtual machine workloads. <a href="https://app.daily.dev/posts/GGgRL0lhA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Godot 4.7 adds CSS like transforms for UI nodes</strong>: New transform offset properties allow visual adjustments to Control nodes without breaking the underlying container layout logic. <a href="https://app.daily.dev/posts/tbKkmsNqA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub to train AI on user data by default</strong>: Starting April 24, GitHub will use interaction data from Copilot users for model training unless they manually opt out in settings. <a href="https://app.daily.dev/posts/v1oQHNWc2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Context engineering emerges as the new RAG bottleneck</strong>: Industry experts are shifting focus from simple vector search to ‘live data layers’ that pre-compute business objects for AI agents. <a href="https://app.daily.dev/feed-by-ids?id=gIi894ZiM&amp;id=Wn2FSGQOP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The myth of the zero line of code data scientist</strong>: Towards Data Science is pitching a ‘full workflow’ where Codex and MCP handle everything from XML parsing to BigQuery uploads without a human touching the keyboard. In reality, the author ended up with a 142GB log file and admitted that ‘depth requires iteration,’ which is polite code for ‘I spent three hours debugging the AI’s bad SQL.’ It’s not a ‘no-code’ revolution; it’s just a very expensive way to generate technical debt and storage fees. <a href="https://app.daily.dev/posts/hqrCj0P03" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI job search automation is the new arms race</strong>: We’ve reached the point where candidates are using Claude-powered scrapers to auto-generate ‘tailored’ resumes and cover letters for every LinkedIn posting. This creates a beautiful feedback loop of garbage where AI-generated applications are screened by AI-powered ATS systems, ensuring no actual human thought occurs on either side of the hiring process. If your ‘strengths-and-gaps analysis’ is automated, you aren’t a self-aware candidate; you’re just a well-configured bot. <a href="https://app.daily.dev/posts/0YroeqW2V" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GenUI and the death of accessibility</strong>: The hype around ‘Generative UI’ frameworks like Figma Sites and Vercel’s latest offering is conveniently ignoring that LLMs are historically terrible at semantic HTML. Jakob Nielsen’s claim that AI will replace accessibility practitioners is the kind of peak-silicon-valley hubris that results in div-soup interfaces that screen readers can’t parse. Just because an AI can generate a JSON schema for a button doesn’t mean it understands the nuances of ARIA roles or keyboard navigation. <a href="https://app.daily.dev/feed-by-ids?id=2XfiIQqJ9&amp;id=msfA6nj8a" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
