I received an official response from Replit and my open-source project will be back up soon; please see the bottom of the blog post for an update. The rest of the content here will remain as a historical artifact.
Dear Matt Mullenweg: an open letter from Wix.com's CEO
Dear Matt,We were all very surprised by your post, as you have so many claims against us.Wow, dude I did not even know we were fighting.First, you say we have been taking from the open source community without giving back, well, of course, that isn’t true. Here is a list of 224 projects on our public GitHub page, and as you can see they are all dated before your post. We have not checked if WordPress is using them, but you are more than welcome to do so, some of them are pretty good.We always sh
A GitHub Issue Title Compromised 4,000 Developer Machines
A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into something new: one AI tool bootstrapping another.
The struggles of an open source maintainer - <antirez>
GitHub MCP Exploited: Accessing private repositories via MCP
We showcase a critical vulnerability with the official GitHub MCP server, allowing attackers to access private repository data. The vulnerability is among the first discovered by Invariant's security analyzer for detecting toxic agent flows.
Investigating unauthorized access to GitHub-owned repositories
If any impact is discovered, customers will be notified via established incident response and notification channels.
Microsoft's open source tools were hacked to steal passwords of AI developers | TechCrunch
Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.
I got targeted
Someone targeted me in an attempt to gain access or credentials because of my Open Source and/or consulting roles
Anthony Fu
It’s not a secret that open-source projects are now a critical part of almost every software project. While most open-source projects are maintained by volunteers, the sustainability of these projects becomes a big concern. The recent xz/liblzma vulnerability accident is a great example that shows the importance of open-source projects and how severe the problem could be.
It’s time to rethink Open Source
Why developers give away valuable work for free — and what can be done to take that money back.
Robin Berjon (@robin.berjon.com)
Again, we can try to be generous. But this fits a pattern. When people found issues in their open source code, instead of fixing them they went closed source. When they had an XSS vulnerability right at launch it took over a day for them to acknowledge and close it.
The crusade against open-source abuse | TechCrunch
There’s a dark cloud on the horizon. The behavior of cloud infrastructure providers threatens the viability of open source. Thankfully, several leaders have mobilized to propose multiple solutions.
Paywall violation ‘eviscerates’ fair use defense: What OpenAI-NYT twist means for publishers
The unsealed material could set a precedent that fuels more lawsuits against AI firms and strengthens publishers hand in licensing talks.
