The telnyx packages on PyPI have been compromised

the-telnyx-packages-on-pypi-have-been-compromised

The SafeDep blog reports that compromised versions of the telnyx package have been found in the PyPI repository: Two versions of telnyx (4.87.1 and 4.87.2) published to PyPI on March 27, 2026 contain malicious code injected into telnyx/_client.py. The telnyx package averages over 1 million downloads per month (~30,000/day), making this a high-impact supply chain […]

Make macOS consistently bad (unironically)

make-macos-consistently-bad-(unironically)

Alongside the various bugs you get, one of the issues of upgrading to MacOS 26 is that it has one of the most notorious inconsistency issues in windows corners. I’m not sure what exactly pushes product designers to like the excessive roundness1. One of the ugliest roundness examples I’ve ever seen is the current one […]

Vibe-Coded Ext4 for OpenBSD

vibe-coded-ext4-for-openbsd

A number of projects have been struggling with the question of which submissions created by large language models (LLMs), if any, should be accepted into their code base. This discussion has been further muddied by efforts to use LLM-driven reimplemention as a way to remove copyleft restrictions from a body of existing code, as recently […]

Telnyx package compromised on PyPI

telnyx-package-compromised-on-pypi

This morning’s telnyx compromise is the latest move in what is now a weeks-long TeamPCP supply chain campaign crossing multiple ecosystems. Trivy. Checkmarx. LiteLLM. And now Telnyx on PyPI, uploaded hours ago at 03:51 UTC on March 27. The pattern is consistent: steal credentials from a trusted security tool, use those credentials to push malicious […]

Telnyx Python SDK: Supply Chain Security Notice

Summary On March 27, 2026 at 03:51:28 UTC, two unauthorized versions of the Telnyx Python SDK were published to PyPI: versions 4.87.1 and 4.87.2. Both versions contained malicious code. Both were quarantined by 10:13 UTC the same day. This incident is part of a broader supply chain campaign that has also affected Trivy, Checkmarx, and […]

Some uncomfortable truths about AI coding agents

some-uncomfortable-truths-about-ai-coding-agents

I’ve been following the development of generative AI closely for several years now. Early on, like most people, I was absolutely blown away by what OpenAI accomplished based on a relatively niche deep learning research paper from Google and a bit of reinforcement learning from human feedback. When it worked, it was absolutely incredible, an […]

15 Years of Forking

15-years-of-forking

Logo 2011-2014 Logo 2014-2015 Logo 2015-2019 Logo 2019 Logo 2019-2023 Logo Today Fifteen years ago today, I posted a thread on the Overclock.net forums. I was sixteen, I had an HP Compaq TC4400 that I’d convinced my parents would “improve my school work”, and I was frustrated that Firefox didn’t have an official 64-bit build. […]

AI got the blame for the Iran school bombing. The truth is more worrying

ai-got-the-blame-for-the-iran-school-bombing.-the-truth-is-more-worrying

On the first morning of Operation Epic Fury, 28 February 2026, American forces struck the Shajareh Tayyebeh primary school in Minab, in southern Iran, hitting the building at least two times during the morning session. American forces killed between 175 and 180 people, most of them girls between the ages of seven and 12. Within […]

SimpleX Chat

simplex-chat

You OwnThe Next Web SimpleX is created on the belief that you must own your profiles, contacts and communities. A decentralized network nobody owns lets you connect with people and share ideas, to be free and secure in your network. Why we are building it

Desk for people who work at home with a cat

desk-for-people-who-work-at-home-with-a-cat

The Neko House Desk understands who’s really in charge of your home, and helps you convince them to let you have some space too. A big part of the appeal of working from home is that even if you’re still working for somebody else, you get much more control over your immediate environment. Want to […]