The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
InfoQ

Google Releases A2UI v0.9: Portable, Framework-Agnostic Generative UI

Google has released A2UI v0.9, a framework-agnostic standard for AI agents to declare user interface intent across multiple ...
The Financial Express

Meta’s Pocket app brings vibe coding to everyone: Here’s how to make games, apps with it

Meta's new Pocket app lets users create and share interactive mini-games using plain text prompts, making vibe coding accessible to everyone without coding skills. Available on iOS and Android with a ...
The Hacker News

Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.
腾讯网

从语音合成到语音识别：Gravity TTS模块与RDK X5 AI开发板实战测评

Gravity：中英文语音合成模块V2.0测评作者：jinglixixi在以往的语音播报应用中，主要是采用串口可知MP3语音模块的方式来实现，其特点是以TF卡来存储播放的语音片段，故语音片段的存储容量很充裕。其不足之处则是，事先需要录制或以语音合成的 ...