Are agent skills safe to install? A 1.7M-install trojan
Trojanized skills hit 1.7M displayed installs before takedown. See how the attack worked, a 6-check audit script, and what it found on a real dev machine.
Wed Oct 28 2026 · 9 min read · 1 views
#claude code
AI coding tools hid 15 GB on my Mac. unclog found it
unclog is a free CLI that finds the caches, logs and orphaned processes AI coding tools leave behind. Here is how to install and use it.
Wed Oct 28 2026 · 11 min read · 3 views
Remotion vs HyperFrames: we timed renders and priced both
Remotion renders our test video about 3x faster than HyperFrames, but HyperFrames has no licence fee. Measured render times, a cost table and a pick-by-team-size guide.
Sat Oct 17 2026 · 8 min read · 16 views
What a 30-second AI explainer video costs, line by line
A 30-second AI explainer costs $6.31, $13.01 or $42.76 depending on the stack: Nano Banana stills, Veo clips, Claude Code and a Remotion or HyperFrames render.
Sat Oct 17 2026 · 8 min read · 3 views
Claude Code and Remotion: install the skill, render a video
The working install command for the Remotion skill in Claude Code, a real prompt-to-MP4 run that cost $0.13, and the errors and defaults that trip people up.
Sat Oct 17 2026 · 8 min read · 10 views
Laravel Boost MCP Servers Failed: The Environment Rule
Laravel Boost shows 'MCP servers failed' when boost:mcp is not registered. The exact environment rule, a tested matrix of seven cases, and the fixes that work.
Thu Oct 15 2026 · 9 min read · 11 views
AI Coding Agents Wiped a Laravel Dev Database in 7 of 8 Runs
I asked Claude Code to add one nullable column to a Laravel app and write a Pest test for it. The app had 2,320 articles in its development database. After the agent finished, the table had 0 rows in
Sat Oct 10 2026 · 10 min read · 2 views
AI Pair Programming in Laravel: A One-Line Rule Beats Boost
In 16 Claude Code runs on the same Laravel task, every run built a correct query. Only the runs that were given an explicit rule paginated the result. The Laravel Boost guidelines, with no rule added,
Sat Oct 10 2026 · 10 min read · 3 views
Spotify Cut Claude Code Token Use 90% With Shunt
Most of what Claude Code spends tokens on is not thinking. It is reading big files, copying test patterns, and typing out boilerplate. Spotify engineer Dimitri Mazmanov noticed this and sent that work
Thu Oct 08 2026 · 6 min read · 6 views
DeepSeek vs Claude: Price, Coding and Claude Code
DeepSeek is far cheaper than Claude, and Claude still wins on the hardest coding and agent work. At October 2026 list prices, a DeepSeek deepseek-flash agent run costs about $9 to $18 a month where
Wed Oct 07 2026 · 10 min read · 15 views
Claude Code Ignoring AGENTS.md? The Real Fix
Claude Code 2.1.277 added AGENTS.md support, but it's a fallback, not a merge. Here's the precedence rule, the /config setting, and the one-line fix.
Sun Sep 27 2026 · 4 min read · 13 views
Your MCP connector spends context before you type
The advice you have read about MCP context cost is out of date. The old rule was simple. Every tool you connect gets injected up front, so a big connector spends a chunk of the window before you type
Sat Aug 22 2026 · 6 min read · 9 views
An AI agent can infect the next one through AGENTS.md
Anthropic and EPFL showed AI agents passing self-spreading instructions through shared prompt files. The fix is one paragraph, and it works today.
Thu Aug 20 2026 · 5 min read · 5 views
Your MCP server failed to start. Five likely causes
MCP server failed to start? Five causes explain almost every case, and stdout logging is the one that hides best. Fix it in the right order.
Thu Aug 20 2026 · 5 min read · 9 views
Claude Code Auto Mode Goes Default August 14
On August 14, 2026, auto mode becomes the default permission mode for new Claude Code sessions on Pro, Max and Team plans. The agent stops asking before each step and simply proceeds, unless the
Wed Aug 12 2026 · 5 min read · 4 views
A GitHub issue could hijack Claude Code and Gemini CLI
Novee showed one GitHub issue could reach secrets via Claude Code, Gemini CLI and Codex actions. Fixed versions, a corrected CVE mapping and a hardening checklist.
Sat Aug 08 2026 · 8 min read · 5 views
How the keyv npm attack reached VS Code and Claude Code
On Tuesday morning a caching library most developers have never thought about became the fastest-moving malware delivery system on the internet. A poisoned release of keyv went up at 09:35 UTC. Within
Wed Aug 05 2026 · 5 min read · 15 views