Vila

Annio always dance🍀🍀🍀

[Vila @AnnioDance]

@osanseviero Gemma-coding-32b

[Vila @AnnioDance]

🤔

[Yann LeCun @ylecun]

Not a critique of the paper, but isn't inductive bias/ regularization the reason for *every* form of generalization?
Neural nets have a number of inductive biases due to the architecture as well as explicit or implicit regularizations.
The mere fact that weight magnitudes are limited (e.g. through regularization) makes the input-output function Lipschitz, which is the property you want to produce a smooth score function.

[Vila @AnnioDance]

@prashant_hq 😂

[Vila @AnnioDance]

@emilyhanyf @modal wow

[Vila @AnnioDance]

😵‍💫

[TANSTACK @tan_stack]

SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
https://t.co/Zy8qG7PA9f
Credit to the security researcher for responsible disclosure.

[Vila @AnnioDance]

@DrJimFan cool

[Vila @AnnioDance]

😂what

[eigen moomin @eigen_moomin]

how it feels like to open the monthly bill from openai

[Vila @AnnioDance]

@keitakuki cool

[Vila @AnnioDance]

@stainlu @Teknium @NousResearch cool

[Vila @AnnioDance]

@zan2434 @eddiejiao_obj @drewocarr coool

[Vila @AnnioDance]

🤔

[Mitchell Hashimoto @mitchellh]

Huge W for Zig, used for inference for K2.6. If you want absolute performance with exacting control over what your CPU executes and the way memory is laid out, Zig is the way.

[Vila @AnnioDance]

@shensi @merge_api The risk control is so strict that I kept failing to register. 😂

[Niall Anderson @INiallAnderson]

Superheavy's evolution has been quite something to watch over the years! 😍
📸: @BocaChicaGal | @NASASpaceflight

[Vila @AnnioDance]

@FactoryAI hmmm...

[Vila @AnnioDance]

@FactoryAI coooool

[Vila @AnnioDance]

@badlogicgames congrats!

[Vila @AnnioDance]

https://t.co/sHAP0f89co

[Vila @AnnioDance]

@xeophon back to "hello world" one day

[Vila @AnnioDance]

😱

[Maxwell Hammad @mvxvvll]

@npmjs @GHSecurityLab there is an active supply chain attack on [email protected] which pulls in a malicious package published today - [email protected] - someone took over a maintainer account for Axios

[Vila @AnnioDance]

@ryancarson 😂