TypeScript

This update covers major version releases for essential Ethereum development tools including Solidity, Vyper, and Foundry. It highlights critical infrastructure improvements such as the Glamsterdam upgrade preparations and significant milestones in contract verification via Sourcify.

Frame is a new neuro-symbolic SAST tool designed to bridge the gap between precise but narrow symbolic analyzers and broad but ungrounded LLM scanners. By using a symbolic engine to verify LLM-proposed vulnerabilities, it achieves higher recall without sacrificing precision.

Researchers have developed MCR-Bench to move beyond static code review evaluation by simulating the iterative nature of real-world developer interactions. The study reveals that current LLMs struggle significantly with maintaining defect state consistency across multiple rounds of code changes.

An attacker compromised AsyncAPI repositories to publish malicious npm packages that deploy the Miasma RAT credential stealer. The attack impacts millions of weekly downloads and utilizes advanced obfuscation and multi-channel C2 infrastructure.

Kuma introduces a way to run trained PyTorch models live in the browser by compiling them into a specialized '.iph' format. By leveraging WebGPU and embedded WGSL shaders, it eliminates the need for server-side inference or heavy runtime dependencies.