The Next Web

North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets

Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.
The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
9to5Google

Google pulls the plug on Tenor API, killing GIF pickers around the web

GIFs are a huge part of the modern web, with Tenor being one of the libraries that powers a variety of apps including Twitter ...
The Next Web

X launches hosted MCP server so AI tools can plug into its API directly

X now hosts its own MCP server, letting AI tools like Claude, Cursor, and Grok connect to the platform's API without developers building the integration.
The Daily Hodl

Autheo Introduces the Internet Operating System – A Decentralized Coordination Layer for Web, Blockchain and AI

Five years in the making, Autheo is launching its decentralized operating system on mainnet – after public testnet adoption surpassed 1.8 million wallets, nearly one million smart contracts and 8.8 ...
PC World

Intel Core Ultra vs. 14th-gen Core HX: Which laptops should you buy?

For the first time in many years, you have a choice when buying a new Intel-based laptop: Intel’s 14th-gen Core Ultra (Meteor Lake) or its latest 14th-gen Core HX chip. Which should you buy, and why?