Wednesday, 25 March 2026

LiteLLM suffers a credential-stealing PyPI supply chain attack, TypeScript 6.0 prepares for a Go rewrite, and Wine 11 delivers up to 678% gaming performance gains on Linux

Today's Lead

FutureSearch

LiteLLM PyPI Package Compromised with Credential-Stealing Malware

A malicious version of the litellm Python package (versions 1.82.7 and 1.82.8) was uploaded to PyPI on March 24, 2026. The compromised package contained a .pth file that automatically executed malware on Python startup — without even importing the package — stealing SSH keys, cloud credentials (AWS, Azure, GCP), environment variables, Kubernetes configs, browser data, and shell history before encrypting and exfiltrating the data. The attack also attempted to establish persistence via backdoor pods in Kubernetes clusters. Both versions have been yanked from PyPI. Users who installed the package are urged to remove it, clear caches, and immediately rotate all credentials.

Read →

Also today

XDA Developers

Wine 11 Rewrites Linux Windows Game Support at the Kernel Level

Wine 11 introduces NTSYNC, a kernel-level driver that replaces userspace workarounds for Windows NT synchronization primitives with direct kernel handling. The change delivers dramatic performance improvements — up to 678% faster in some games. The release also completes the WoW64 architecture overhaul, so 32-bit Windows applications no longer require separate 32-bit system libraries. Additional improvements include Wayland support enhancements, upgraded graphics backends (EGL and Vulkan 1.4), and a wide range of game-specific compatibility fixes. NTSYNC requires Linux kernel 6.14 or later.

Read →

Microsoft

TypeScript 6.0 Announced, Paving the Way for a Go-Native TypeScript 7.0

TypeScript 6.0 is a transitional release bridging the gap to TypeScript 7.0, which will be rewritten in Go for native performance. The release adds support for the Temporal API, RegExp.escape, and Map/WeakMap upsert methods, and makes breaking changes to modernize defaults — strict mode is now on by default, and support for legacy ES5 output, AMD/UMD module formats, and the baseUrl configuration option are being deprecated. These changes are designed to prepare codebases for the Go-native future of the TypeScript compiler.

Read →

Arm Newsroom

Arm Introduces AGI CPU Designed for Agentic AI Data Centers

Arm has launched the AGI CPU, a new processor purpose-built for agentic AI workloads in data centers. The chip emphasizes rack-scale performance, energy efficiency, and scalable compute architecture to support autonomous AI systems. The announcement marks Arm's strategic expansion into the AI infrastructure market, positioning the company to compete with x86 alternatives as organizations build next-generation cloud computing systems powered by agentic AI.

Read →

Cloudflare Blog

Cloudflare Dynamic Workers: Sandboxing AI Agents 100x Faster Than Containers

Cloudflare's Dynamic Worker Loader is now in open beta, enabling Workers to instantiate new sandboxed Workers with AI-generated code at runtime using V8 isolates instead of containers. The approach is roughly 100x faster to start (milliseconds vs. hundreds of milliseconds) and 10–100x more memory-efficient than containers. It scales to millions of concurrent requests without pre-warming, supports TypeScript RPC APIs for tool definition, and includes credential injection and HTTP filtering capabilities. The feature supports emerging "Code Mode" patterns where agents write code to call APIs instead of making sequential tool calls.

Read →

The Register

FCC Bans Import of New Foreign-Made Routers

The FCC has updated its Covered List under the Secure Networks Act to prohibit approval of any new consumer-grade routers manufactured outside the United States, citing national security supply chain concerns. The ban effectively advantages Starlink, whose Texas-made Wi-Fi router appears to be the only domestically manufactured consumer option, as virtually all other routers sold by Cisco, Netgear, and others are made internationally. The move is seen as ironic given that U.S. intelligence agencies have previously been caught intercepting Cisco routers in transit to install espionage firmware.

Read →

Apple Newsroom

Apple Launches Apple Business, an All-in-One Platform for Companies of All Sizes

Apple announced Apple Business, a unified free platform launching April 14, 2026 in 200+ countries. It consolidates device management (with zero-touch deployment MDM), collaboration tools including integrated email and calendar, and business discovery features into a single service. Starting summer 2026, the platform will include local business advertising on Apple Maps. Existing Apple Business Manager users will be automatically migrated to the consolidated platform.

Read →

Simon Willison

Claude Code Introduces Auto Mode with AI-Based Permission Decisions

Anthropic introduced auto mode for Claude Code, which uses a separate Claude Sonnet 4.6 classifier to automatically approve or block file and network operations without user prompts — offering an alternative to the --dangerously-skip-permissions flag. The classifier uses an extensive default ruleset and can be customized with user-defined rules, viewable via claude auto-mode defaults. Simon Willison expresses skepticism about AI-based permission systems being non-deterministic by nature, noting the default allowlist includes pip install -r requirements.txt, which would not have blocked the LiteLLM supply chain attack. He advocates for deterministic sandbox environments over prompt-based protections.

Read →

Martin Fowler

Architecture Decision Records: A Lightweight Standard for Capturing Why Systems Are Built the Way They Are

Martin Fowler's updated overview of Architecture Decision Records (ADRs) describes these short, numbered documents that capture individual architectural decisions, their context, alternatives considered, and consequences. ADRs are stored directly in the source repository (conventionally under doc/adr), written in markdown, and tracked with statuses: proposed, accepted, or superseded. Crucially, ADRs are never modified after acceptance — superseded decisions are linked to their replacements. Beyond creating a historical record for future developers, the act of writing ADRs surfaces differing viewpoints and forces resolution. Fowler highlights the Advice Process use case, where ADRs formalize gathering and summarizing input from stakeholders.

Read →