‼️Do not npm install or deploy anything right now
Supply chain attack on axios 1.14.1 - even if you don’t use axios it may be a nested dep.
Pin versions or wait until this is resolved
Agreed guardrails cap the damage, but they don't fix why the loop started. The agent looped because it forgot what it already tried. Thats a memory problem, not a spend-limit problem.
Curious you mention using an Obsidian-style knowledge graph. Do you think that pattern (structured nodes, typed links, contradiction tracking) could work as the runtime memory layer for agents? Feels like the same problem at a different scale.
Hey @kentcdodds you have been talking about context bloat and context engineering in the MCP/agent space. i wrote a deep dive on why AI agents actually fail (benchmarks, $47k runaway loops, error compounding) and why context engineering not bigger models is the fix.
i think the missing layer is structured memory that decides what the model sees at each step, not dumping everything into the window.
Would love your take on whether i'm right about the problem and the solution:
https://t.co/QBTpwr1boJ
Today we're launching local scheduled tasks in Claude Code desktop.
Create a schedule for tasks that you want to run regularly. They'll run as long as your computer is awake.
Great points. Context rot is a fundamental systems problem in LLM agents.
Long-running workflows cause:
• context degradation
• reasoning drift
• instruction loss
Which is why multi-step agents fail far more than demos suggest.
I explored this in my article on the “AI Agent Illusion” 👇
https://t.co/QBTpwr1boJ
Introducing EVMbench—a new benchmark that measures how well AI agents can detect, exploit, and patch high-severity smart contract vulnerabilities. https://t.co/op5zufgAGH
Introducing json-render
AI-generated UI. Deterministic output.
1. Define your component catalog
2. AI steams JSON
3. Render interactive UI
Let users prompt dashboards, widgets and apps - safely constrained to components and actions you define
Skillsync helps companies find elite (but overlooked!) engineers on GitHub based on what they have actually built.
It analyzes public GitHub contributions and turns them into structured skill profiles that recruiters & hiring managers can search.
Congrats to @narsagna and @nishantjosh on the launch!
https://t.co/r3C8AD5UE4
🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk.
The malicious payload works by silently swapping crypto addresses on the fly to steal funds.
If you use a hardware wallet, pay attention to every transaction before signing and you're safe.
If you don’t use a hardware wallet, refrain from making any on-chain transactions for now.
It’s still unclear whether the attacker is also stealing seeds from software wallets directly at this stage.
Excellent report here: https://t.co/5CtiZJHYsN