Farid Zakaria’s trynix.dev lets users run any Nix package from the past 13 years inside a browser‑based x86_64 Linux VM powered by QEMU‑WASM. By providing URL‑addressable packages, a user can simply navigate to a link such as https://trynix.dev/?pkg=python3%403.6.2, click "Load," and obtain an interactive shell running that specific package. The platform is also integrated with GitHub Actions, enabling pull‑request reviews that launch the PR’s build directly in the browser via trynix-preview.
Release: alchemy-utils 0. 1a0 I've long pondered what a database agnostic version of my sqlite-utils Python library and CLI utility might look like.
The article discusses a vulnerability in Anthropic’s Claude Code’s auto mode, which was promoted as a safeguard against prompt injection attacks. Prompt‑injection researcher Johann Rehberger demonstrated that the auto mode can be tricked into executing malicious code, even blocking the agent’s own cleanup attempts. The author concludes that the safest approach is to run coding agents in isolated sandboxes and restrict their access to sensitive resources.
Release: sqlite-utils 4. 2.
Research: smolmachines / smolvm as a sandbox for untrusted Python & JavaScript I tasked Claude Fable 5 running in Claude Code for web with the following research task: Put https://smolmachines. com through its paces as a fast secure sandbox.
Large language model (LLM) agents are evolving from request-response assistants into long-running software actors: they maintain state across model calls, fork subtasks, wait for external events, request human authority, generate tools, and perform side effects that must be resumed and audited. This paper presents Agent libOS, a library-OS-inspired runtime substrate for LLM agents.
The article warns of a targeted campaign against prominent Rust developers and crate owners, aiming to compromise their devices and accounts to publish malware. Attackers use seemingly legitimate video calls to trick targets into installing malicious software or executing commands, such as a fake audio codec or clipboard command. A recent supply‑chain attack on the array‑ref crate illustrates the threat, and the author suggests using dependency cooldowns as a defensive measure.
EVE Online is beginning its transition to Python 3, a move that will involve using the futurize script on 2.4 million lines of code and a manual review of about 20,000 differences between Python 2 and Python 3. The company has historically run on Stackless Python since 2003, with the last major upgrade in 2010 to Stackless Python 2.7. While the announcement does not detail how Stackless will be replaced, the team previously showcased a shift away from Stackless in their Carbon engine for EVE Frontier, leveraging the open‑source carbonengine/scheduler library.
arXiv:2606. 03895v1 Announce Type: cross Abstract: Large language model (LLM) agents are evolving from request-response assistants into long-running software actors: they maintain state across model calls, fork subtasks, wait for external events, request human authority, generate tools, and perform side effects that must be resumed and audited.
By Yingqi Zhang
arXiv:2504. 20412v3 Announce Type: replace-cross Abstract: Fuzzing frameworks like syzkaller have uncovered thousands of Linux kernel crashes, many of which are critical and security-sensitive.
By Alex Mathai, Chenxi Huang, Suwei Ma, Jihwan Kim, Hailie Mitchell, Aleksandr Nogikh, Petros Maniatis, Franjo Ivan\v{c}i\'c, Junfeng Yang, Baishakhi Ray
arXiv:2606. 03895v2 Announce Type: replace-cross Abstract: Large language model (LLM) agents are becoming long-running software actors rather than fixed tool users.
By Yingqi Zhang
Research: A shot-scraper-style JSON API on Bun 1. 4's new Bun.