Notepad++'s update infrastructure was hijacked by state-sponsored attackers, redirecting users to malicious servers. The developer is investigating with security experts.
programmingSaturday, June 20, 2026
Notepad++ hacked, Vercel launches agent framework
Today's programming news is split between security incidents and the rise of AI agents. Notepad++ was compromised by state-sponsored hackers, while Vercel unveiled a new framework for building AI agents. Meanwhile, the community is debating the practical limits of AI coding tools and how to evaluate them.
Security incident
The day's biggest story is a serious supply-chain attack on a beloved text editor.
AI agents evolve
Several announcements show the AI agent space is maturing, from new frameworks to evaluation labs.
Vercel's eve framework treats each AI agent as a directory of files, akin to Next.js pages, aiming to simplify production deployment of agents.
Cloudflare's Temporary Accounts let AI agents deploy code instantly without human signup flows, removing a major friction point for autonomous agents.
Hex shares how they built an internal lab to evaluate data agents, tackling challenges like silent bugs and lack of realistic training data.
Tools and practices
Developers are rethinking workflows around AI, from token budgeting to backporting bug fixes.
Token optimization is reframed as context engineering, with levers like bloated chat history and unused tool schemas costing real money.
Project Valkey now uses AI agents to backport bug fixes, freeing human maintainers for higher-level work.
Also today14
Redgateopsmtrs.comAsk HN: Due to spam on GitHub, what platforms can I move my projects?news.ycombinator.com
I Built My Own Flight Tracker with a Raspberry Piraspberrytips.com
XLibre XServer 25.2 Changesgithub.com
Pi may be a powerful AI coding agent, but I refuse to run it without this extensionwww.xda-developers.com
I Downgraded My AI and Output Got Betterhackernoon.com
.NET 11 Preview 5: Brings File-Based App Improvements, New C# Features, and a Blazor Validation Wavewww.infoq.com
Microsoft has released .NET 11 Preview 5, bringing updates across the runtime, SDK, libraries, ASP.NET Core, .NET MAUI, C#, and Entity Framework Core. Key highlights include file-based app improvements such as the new #:ref directive for splitting code across files without creati
mary.my.id/atcutetangled.sh
A collection of lightweight TypeScript packages (@atcute) for the AT Protocol, which powers the Bluesky social network. The packages provide client libraries for making API calls, including support for authenticated requests and OAuth browser integration. The quick start example
GitHub - ascorbic/cirrus: A single-user ATProto PDS that runs on a Cloudflare Workergithub.com
Cirrus is a single-user AT Protocol Personal Data Server (PDS) that runs on Cloudflare Workers, allowing Bluesky users to self-host their data (posts, follows, profile, media) without managing servers. It uses Cloudflare's Durable Objects and R2 storage for edge-based, serverless
HELIOS — The Longest Day: building computation out of sunlightcstu.io
A submission for the June Solstice Game Jam, HELIOS — The Longest Day is a real-time light-routing logic puzzle where players use mirrors, splitters, and optical logic gates to bend and divide sunlight to wake dormant crystals before sunset. The game uniquely fuses the solstice t
Claude Code finally made the terminal accessible to people like me, and now I can't go backwww.xda-developers.com
The article is a personal narrative about overcoming the intimidation of using the terminal/command line interface. The author describes how they previously viewed the terminal as something only expert programmers or hackers use (as depicted in movies), but discovered Claude Code
Freenetfreenet.org
Freenet is a peer-to-peer platform for decentralized applications that enables communication, collaboration, and commerce without relying on big tech companies. It organizes peers into a small-world network on a ring structure, allowing messages to find destinations in just a few
AI agents don’t need more hype. They need a mapwww.pcworld.com
The article critiques the current state of AI agents, arguing they are overhyped and underperform in practical tasks like booking dinner reservations. It explains that AI agents are slow, clunky, and less efficient than existing tools (e.g., OpenTable). The piece suggests that wh
Kestra: Ops automation beyond CI/CDwww.heise.de
This article discusses Kestra, an open-source orchestration platform that goes beyond traditional CI/CD pipelines. It highlights how Kestra enables automation of long-running operational processes, self-service workflows, and infrastructure provisioning — tasks that typical CI/CD
More roundups that day
space industry roundupSpaceX's post-IPO identity crisis deepens
publishing roundupAI controversy shakes publishing world

psychology roundupThe psychology of over-explaining and stigma today
entrepreneurship roundupCashing out and focusing up
history roundupJuneteenth, dictators' chefs, rare cauldron
photography roundup