OpenCode hacked, eMudra used private key of 4, PHP hit by supply-chain chaos
burny_tech · x · 2026-10-21
ThePrimeagen rounds up a rough week: open-source AI coding tool OpenCode was hacked; India's eMudra picked a private key value of 4, making everything it signed deemed unsafe; and PHP, running much of the internet, suffered a serious hack. A blunt reminder of open-source supply-chain risk for developers.
More from coding & agent
- 90% of big-company knowledge lives in heads, and "company brain" startups are in for pain — gabriel1 · 2026-10-21
- EAU: Co-evolving user simulator, environment, and RL setup for training LLM agents — UAlberta · 2026-10-21
- Meta's Self-Credit: Dense Rewards from Sparse RLVR via Intra-group Rescaling — meta · 2026-10-21
- Notion details its Auto model router: Elo-based evals, 62-93% cheaper than flagship models — ivanhzhao · 2026-10-21
- Dev sets up automation so agents proactively pick up stale issues and PRs — vikvang1 · 2026-10-21
- Tamper-proof agent logs still can't prove the agent did the job: who reads the record back? — ZealousidealAct9661 · 2026-10-21