A lot of blogs on this are AI generated and such as this is developing, so just linking to a bunch of resources out there:Socket:- Sep 15 (First post on breach): <a href="https:&#x2F;&#x2F;socket.dev&#x2F;blog&#x2F;tinycolor-supply-chain-attack-affects-40-packages" rel="nofollow">https:&#x2F;&#x2F;socket.dev&#x2F;blog&#x2F;tinycolor-supply-chain-attack-affect...</a>- Sep 16: <a href="https:&#x2F;&#x2F;socket.dev&#x2F;blog&#x2F;ongoing-supply-chain-attack-targets-crowdstrike-npm-packages" rel="nofollow">https:&#x2F;&#x2F;socket.dev&#x2F;blog&#x2F;ongoing-supply-chain-attack-targets-...</a>StepSecurity – <a href="https:&#x2F;&#x2F;www.stepsecurity.io&#x2F;blog&#x2F;ctrl-tinycolor-and-40-npm-packages-compromised" rel="nofollow">https:&#x2F;&#x2F;www.stepsecurity.io&#x2F;blog&#x2F;ctrl-tinycolor-and-40-npm-p...</a>Aikido - <a href="https:&#x2F;&#x2F;www.aikido.dev&#x2F;blog&#x2F;s1ngularity-nx-attackers-strike-again" rel="nofollow">https:&#x2F;&#x2F;www.aikido.dev&#x2F;blog&#x2F;s1ngularity-nx-attackers-strike-...</a>Ox - <a href="https:&#x2F;&#x2F;www.ox.security&#x2F;blog&#x2F;npm-2-0-hack-40-npm-packages-hit-in-major-supply-chain-attack&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.ox.security&#x2F;blog&#x2F;npm-2-0-hack-40-npm-packages-hi...</a>Safety - <a href="https:&#x2F;&#x2F;www.getsafety.com&#x2F;blog-posts&#x2F;shai-hulud-npm-attack" rel="nofollow">https:&#x2F;&#x2F;www.getsafety.com&#x2F;blog-posts&#x2F;shai-hulud-npm-attack</a>Phoenix - <a href="https:&#x2F;&#x2F;phoenix.security&#x2F;npm-tinycolor-compromise&#x2F;" rel="nofollow">https:&#x2F;&#x2F;phoenix.security&#x2F;npm-tinycolor-compromise&#x2F;</a>Semgrep - <a href="https:&#x2F;&#x2F;semgrep.dev&#x2F;blog&#x2F;2025&#x2F;security-advisory-npm-packages-using-secret-scanning-tools-to-steal-credentials&#x2F;" rel="nofollow">https:&#x2F;&#x2F;semgrep.dev&#x2F;blog&#x2F;2025&#x2F;security-advisory-npm-packages...</a>

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

Things you can do with a Software Defined Radio (2024)

Denmark close to wiping out cancer-causing HPV strains after vaccine roll-out

Waymo has received our pilot permit allowing for commercial operations at SFO

About the security content of iOS 15.8.5 and iPadOS 15.8.5

How to make the Framework Desktop run even quieter

I built my own phone because innovation is sad rn [video]

Bertrand Russell to Oswald Mosley (1962)

Doom crash after 2.5 years of real-world runtime confirmed on real hardware

A dumb introduction to z3

GNU Midnight Commander

How Container Filesystem Works: Building a Docker-Like Container from Scratch

In Defense of C++

The Asus Gaming Laptop ACPI Firmware Bug: A Deep Technical Investigation

Should we drain the Everglades?

Meta RayBan AR glasses shows Lumus waveguide structures in leaked video

Notion API importer, with Databases to Bases conversion bounty

Slow social media

Hi HN! We are Arjun, Ramnique, and Akhilesh, the founders of Rowboat (<a href="https:&#x2F;&#x2F;www.rowboatlabs.com">https:&#x2F;&#x2F;www.rowboatlabs.com</a>), an AI-assisted IDE for building and managing multi-agent systems with a copilot. Using Rowboat, you can build both deterministic automation agents (e.g. automatically summarizing emails) and more agentic systems (e.g. a meeting prep assistant or a customer support bot).Here are some examples:- Meeting-prep assistant: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=KZTP4xZM2DY" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=KZTP4xZM2DY</a>- Customer support assistant: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=Xfo-OfgOl8w" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=Xfo-OfgOl8w</a>- Gmail and Reddit assistant: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=6r7P4Vlcn2g" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=6r7P4Vlcn2g</a>Rowboat is open-source (<a href="https:&#x2F;&#x2F;github.com&#x2F;rowboatlabs&#x2F;rowboat" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;rowboatlabs&#x2F;rowboat</a>) and has a growing community. We first launched it on Show HN a few months ago (<a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43763967">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43763967</a>).Today we are launching a major update along with a cloud offering. We’ve added built-in tool integrations for 100s of tools like Gmail, Github and Slack, RAG with documents and URLs, and triggers to invoke your assistant based on external events.Our cloud version includes all the features of the open-source IDE, but runs instantly with no setup or API keys. For launch, we&#x27;re offering $10 free usage with Gemini models so you can start building right away for free without adding any card details. Paid plans start at $20&#x2F;month and give you access to additional models (OpenAI, Anthropic, Gemini, with more coming) and higher usage limits.There’s a growing view that some tasks are better handled by single agents (<a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=45096962">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=45096962</a>), while others benefit from multi-agent systems for higher accuracy ( <a href="https:&#x2F;&#x2F;www.anthropic.com&#x2F;engineering&#x2F;multi-agent-research-system" rel="nofollow">https:&#x2F;&#x2F;www.anthropic.com&#x2F;engineering&#x2F;multi-agent-research-s...</a>). The difference often comes down to scope: a focused task like coding suits a single agent, but juggling multiple domains such as email, Slack, and LinkedIn is better split across agents. Multi-agent systems also help avoid context pollution, since LLMs lose focus when asked to handle unrelated tasks. In addition, cleanly dividing responsibilities makes each agent easier to test, debug, and improve.However, splitting work into multiple agents and getting their prompts right is challenging. OpenAI and others have published patterns that work well for different scenarios (<a href="https:&#x2F;&#x2F;cdn.openai.com&#x2F;business-guides-and-resources&#x2F;a-practical-guide-to-building-agents.pdf" rel="nofollow">https:&#x2F;&#x2F;cdn.openai.com&#x2F;business-guides-and-resources&#x2F;a-pract...</a>). We’ve added agent abstractions, built on top of OpenAI’s Agents SDK, to support these patterns. These include user-facing agents that can decide to hand off to another agent when needed; task agents that perform internal tasks; and pipelines that deterministically call a sequence of agents.Rowboat’s copilot (‘Skipper’) is aware of these patterns and has been seeded with tested patterns, such as a manager‑worker setup for a customer support bot, a pipeline for automated document summarization, and multi‑agent workflows for combining web search with RAG. It can:- Build multi-agent systems from a high-level request and decide how work must be delegated across agents- Edit agent instructions to make correct tool calls using Composio tools or any connected MCP server- Observe your playground chat and improve agents based on your testsWe see agentic systems as a spectrum. On one end are deterministic workflows with a few LLM calls. On the other end are fully agentic systems where the LLM makes all control flow decisions - we focus on this end of the spectrum, while still allowing deterministic control where necessary for real-world assistant use cases. We intentionally avoided flowchart-style editors (like n8n) because they become unwieldy when building and maintaining highly agentic systems.We look forward to hearing your thoughts!

Launch HN: Rowboat (YC S24) – Open-source IDE for multi-agent systems

AMD Open Source Driver for Vulkan project is discontinued