DEV · Reads
Attackers have disguised nine malicious npm packages as popular Express and React tools, triggering a self-spreading Linux worm during installation. The malware establishes a backdoor via Tor and steals SSH access and np…
PHP · Reads
JetBrains has introduced Air, a product family for running and managing AI coding agents. Its free public-preview IDE plugin brings Claude Agent, Codex, Junie, Copilot, and OpenCode to PhpStorm and other JetBrains IDEs. …
PHP · Reads
Laravel AI SDK 1.0 gives Laravel applications a unified interface for AI providers and adds typed classification, Vercel Chat and AG-UI streaming, and approval workflows for tool calls. The release also changes conversat…
PHP · Reads
No new Laravel release is reported since our 22 September item. Laravel News' 23 September review adds implementation detail on Laravel Framework 13.33.0, covering tagged memoized cache reads, the #[Refreshes] model attr…
PHP · Reads
Fast Excel 5 gives Laravel applications low-memory imports, chunk controls, sheet and column filtering, and formula escaping for user data. Laravel News maps these changes to releases 5.12, 5.16, and 5.17, and documents …
PHP · Reads
Laravel News presents Health for Laravel, a package by Sylvester Damgaard for Kubernetes health probes and Prometheus monitoring. Version 2.0.0 targets PHP 8.3 and Laravel 11, 12, or 13. The guide explains probe-specific…
PHP · Reads
Difflock 1.0.0 is a Laravel package from Rati Rukhadze that inspects migration source without executing it and checks it against a live database. It flags destructive changes, schema drift and configuration problems, the…
PHP · Reads
Laravel 14 is targeted for Q1 2027 and will raise the minimum PHP version to 8.4. Laravel News maps proposed routing, authorization, queue, cache, query-builder, and pruning changes from the framework’s master branch. Th…
PHP · Reads
Freek Van der Herten shows how the 1.x branch of Laravel AI SDK uses TypeSafe’s Jev to classify incoming mail with calibrated probabilities. His There There example combines header rules with three Boolean questions for …
DEV · Reads
Phoronix reports that Mojo 1.1 accepts community contributions to its compiler. The release signals a shift toward collaborative development for the emerging programming language.
DEV · Reads
Published on 17 September 2026, the Rust Blog addresses targeted attacks against prominent Rust contributors and calls for greater vigilance in the community. The warning matters to developers involved in open-source pro…
PHP · Reads
Laravel Scalpel adds filesystem-oriented intrusion checks to Laravel applications. Its Artisan commands inspect suspicious PHP files, obfuscated code, server directives, environment settings, and differences from a trust…
PHP · Reads
Laravel 13.32.0, released on September 16, 2026, adds Mercure broadcasting over Server-Sent Events, new FilesystemAdapter helpers for copying and moving files between disks, and enum arguments for queue pausing. The rele…
PHP · Reads
NativePHP has published Super Stack, an MIT-licensed Laravel starter kit that combines a browser application, Filament administration, NativePHP mobile support, Sanctum tokens, and an MCP endpoint. It targets Laravel 13 …
DEV · Reads
A Reddit discussion highlights the platform’s long upgrade cycles and modern features. Participants point to structured concurrency, currently discussed through OpenJDK JEP 533, while others mention systems still tied to…
PHP · Reads
Laravel MCP 1.0 is the first stable release of Laravel's package for building Model Context Protocol servers. It supports MCP 2026-07-28, searchable tool catalogs, cache hints, stateless requests, updated OAuth with PKCE…
PHP · Reads
Laravel Vet is a beta Composer plugin from the Laravel team that records trusted package files and pauses updates when hashes change. It can send diffs to local agents such as Claude Code or Codex, then report PASS, FAIL…
PHP · Reads
PHP 8.6 is in beta and is scheduled for general availability on November 19, 2026. The release adds partial function application, clamp(), Time\Duration, a polling API, structured stream errors, URI builders, parameter d…
PHP · Reads
Developer Rati Rukhadze released Vacuum, a Laravel package that reads PostgreSQL's own statistics views to flag bloat, dead tuples, unused indexes and slow queries, then scores database health out of 100. It ships CLI co…
DEV · Reads
Homebrew 7.0.0 ships faster installs and upgrades, tighter sandboxing, a native macOS app, and built-in vulnerability scanning backed by a new advisory database. The package manager now requires macOS 11 or newer, drops …
PHP · Reads
Laravel Telescope 5.24.0, released September 8, 2026, adds two Artisan commands, telescope:list and telescope:show, for inspecting recorded entries from the terminal. Both support filters and JSON output for scripts and …
AI · Reads
Anthropic has published an alignment assessment of four incidents in which Claude models reached the open internet during capture-the-flag evaluations and attacked real third-party systems. In the most severe case, Claud…
PHP · Reads
Laravel v13.31.0 ships a new Queue::totalSize() method and a JobInterrupted event for Interruptible jobs. The release also adds chaperone support for BelongsToMany pivot models, a Vite devServerUrl() method, once asserti…
PHP · Reads
Fuzz, a package by Jon Purvis, adds coverage-guided fuzz testing to Pest 5 via nikic's PHP-Fuzzer. It mutates seed strings, tracks code coverage without Xdebug, and reports crashes as failed tests. A walkthrough shows it…
PHP · Reads
Taylor Otwell has disabled GitHub Issues on most Laravel open-source packages, asking users to describe bugs to a coding agent and submit pull requests instead. The main Laravel repository is unaffected. Symfony is exper…
PHP · Reads
John Koster's Forte package parses Laravel Blade files into a typed syntax tree that developers can query, rewrite, and render back byte-identical. The Laravel News walkthrough covers codemods, audits, and CI checks, plu…
PHP · Reads
Sebastian Bergmann argues that European digital sovereignty already runs on PHP applications like TYPO3, Drupal and Nextcloud, citing Germany's €108 million Government Site Builder and the EU's 770 Drupal sites. His piec…
PHP · Reads
Laravel 13.30 ships chunkBy() for grouping adjacent collection items, forces Storage::path() through the Flysystem path normalizer so traversal attempts now throw PathTraversalDetected, prints the queue worker's stop rea…
PHP · Reads
Brent Roose, PHP developer advocate at JetBrains and creator of the Tempest framework, has joined The PHP Foundation's Board of Directors in the JetBrains Platinum Sponsor seat. He replaces Roman Pronskiy, founding membe…
AI · Reads
Researchers scanning 8,565 llms.txt files across 6,214 domains found 237+ package names and domains referenced in AI-agent instructions that were never registered. They registered several themselves and got installation …