DevOps and Open Technologies
Two Malicious npm Packages Aim to Steal Credentials and Other Secrets
Jeff Burt | | API Keys, CI/CD pipelines, credential theft, Data Exfiltration, exposed secrets, GitHub repositories, maintainer account, malicious npm packages, sonatypeBad actors took over a npm maintainer account and have published two malicious packages designed to steal credentials, API keys, and other secrets from the computers of victims who download them from ...
Open SWE Captures the Architecture That Stripe, Coinbase and Ramp Built Independently for Internal Coding Agents
Tom Smith | | AgenticWorkflows, AGENTSmd, AICodingAgents, AutonomousAgents, CloudSandboxing, DeveloperExperience, devops, DevOpsAutomation, GitHubIntegration, LLMFramework, MITLicensed, SlackOps, SoftwareEngineeringIntelligence, SubagentOrchestrationExplore Open SWE, the open-source framework by LangChain that codifies the internal AI coding agent architectures used by Stripe, Ramp and Coinbase. Released March 17, 2026, this MIT-licensed project offers a customizable ...
How eBPF and OpenTelemetry Have Simplified the Observability Function
Morgan McLean | | auto instrumentation, ebpf, endpoint visibility, Grafana Labs, instrumentation, kernel level, kubernetes, legacy applications, linux, metrics, monitoring, network observability, OBI, observability, observability adoption, observability practice., OpenTelemetry, OpenTelemetry Injector, RED metrics, SDKs, security concerns, Splunk, supply chain, telemetry, third party software, traces, vendor neutral, zero code instrumentationOverview arguing that OpenTelemetry eBPF Instrumentation (OBI) — combined with OpenTelemetry Injector — removes barriers to full observability by enabling zero-code, kernel-level telemetry for Kubernetes and Linux environments, solving language, legacy, and ...
N. Korean Famous Chollima Hackers Use Malicious npm Packages to Steal Data
Jeff Burt | | Contagious Interview, Famous Chollima, infostealer, linux, macOS, malicious npm packages, Microsoft Windows, Pastebin, remote access trojan (RAT), Socket, software developers, typosquattingA group of more than two dozen malicious npm packages used to steal secrets and credentials from software developers has all the hallmarks – from infrastructure to operations – of Famous Chollima, ...
The Future of AI in Software Quality: How Autonomous Platforms are Transforming DevOps
Igor Kirilenko | | agentic AI, CI/CD pipelines, devops automation, software quality, static analysisAgentic AI is transforming DevOps by embedding autonomous quality checks into CI/CD pipelines, improving code security, coverage and speed ...
AWS Just Turned “Deploy to AWS” Into a Five-Word Prompt
AWS Agent Plugins give coding agents the skills to architect, estimate costs, and deploy to AWS. Type "deploy to AWS" and the agent handles the rest ...
When DevOps Meets the Cloud: A Real-World Transformation Story
Yashwanth | | CI/CD Automation, cloud migration, DevOps transformation, infrastructure as code, observabilityA real-world DevOps and cloud transformation story showing how automation, observability, and cultural change improved reliability and delivery ...
What a ‘Good Plan’ Really Means for AI Coding Agents
Michael Parker | | Agile methodologies, AI coding agents, application delivery, CI/CD pipelines, coding efficiency, context retention, continuous improvement, Engineering best practices, error management, modernization, planning in development, software development, task execution, validation processesExplore how AI coding agents are transforming software development. This article discusses the importance of clear objectives, runnable tasks, and continuous validation in planning to ensure that the transition from idea to ...
Cline CLI 2.0 Turns Your Terminal Into an AI Agent Control Plane
Cline CLI 2.0 brings full AI coding agents to the terminal with parallel execution, headless CI/CD mode, and ACP editor support. Open source, any model ...
Forget the Vibe-Coders, We Need to Support Responsible AI-Assisted Development
Guillaume Moigneu | | AI in development, automated security, build pipelines, developer roles, Human Oversight, orchestration, responsible AI use, software design, Software infrastructure, spec codingWhile AI tools are increasingly used in development, they should enhance rather than replace human input. Developers must shift from merely writing code to orchestrating and validating AI-generated code. This 'spec coding' ...
Will AI Kill the OSS Star?
Alan Shimel | | AI and OSS relationship, AI impact on open source, AI slop, AI-generated pull requests, apprenticeship model, coding ecosystem, collective understanding, community health, community interaction, custom code generation, documentation decline, economic shift, engagement drop, fragmentation risk, generative AI, licensing issues, long-term sustainability, open source challenges, open source maintenance, OSS market, software development trends, software security, standardization, technology evolution., vibe codingAs AI-driven development accelerates, open source software faces an uncomfortable paradox: Usage is rising while engagement, sustainability and community economics quietly erode. AI isn’t eliminating OSS, but it is reshaping how code ...
What is OPA (Open Policy Agent)?
Open Policy Agent (OPA) is a versatile policy engine designed to handle policy enforcement across cloud infrastructures. It enables users to define and apply policies consistently across a variety of systems, helping ...
