1
A hacker group is poisoning open source code at an unprecedented scale
黑客通过VSCode扩展投毒开源代码，GitHub遭供应链攻击，规模史无前例。
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.
2
Flipper unveils a Linux-powered networking gadget built for hackers and tinkerers
Flipper发布Linux驱动网络设备，支持蓝牙、RFID、NFC等，为黑客和DIY玩家打造。
Flipper Devices said that the new gadget is in development and the base model will cost under $350
3
EvilGenie: A Reward Hacking Benchmark
首个专攻奖励黑客（reward hacking）的基准测试，评估大模型奖励欺骗能力与对齐风险。
arXiv:2511.21654v2 Announce Type: replace Abstract: We introduce EvilGenie, a benchmark for reward hacking in programming settings. We source problems…
4
GitHub says hackers stole data from thousands of internal repositories
GitHub官方确认遭黑客攻击，约3800个内部代码仓库数据被盗，安全事件升级。
The code hosting giant GitHub said it was investigating a breach, but said there was no evidence of customer data theft.
5
Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack
数十个流行开源软件包遭供应链攻击，黑客持续投毒，开发者需警惕依赖风险
The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects and, in turn, developers…
6
Show HN: The Name in the Bracket (a free book on naming tensor dimensions)
一本教你优雅命名张量维度的免费书，从根源减少维度错误与思维混乱
Article URL: https://einlang.github.io/einlang/book/ Comments URL: https://news.ycombinator.com/item?id=48180820 Points: 1 # Comments: 1