The attack was executed using the compromised credentials of a lead maintainer of axios, allowing the assailant to inject a malicious package named plain-crypto-js@4.2.1 as a dependency. This malicious package was designed to evade detection by masquerading as a legitimate component, thereby increasing its potential impact.

Prior to the publication of the malicious versions, the attack was pre-staged over an 18-hour period, indicating a high level of planning and sophistication. The malicious versions of axios were downloaded extensively, given that axios boasts over 100 million weekly downloads and is utilized in approximately 80% of cloud and code environments.

Key moments

The attack involved a cross-platform Remote Access Trojan (RAT) that targeted macOS, Windows, and Linux systems. Once installed, the RAT dropper executed a postinstall script that contacted a command-and-control server, potentially compromising the security of affected systems. Observations indicated that execution of the malicious code occurred in 3% of the environments where the malicious versions were deployed.

Security experts from StepSecurity detected the attack using their AI Package Analyst and Harden-Runner tools, which are employed in over 12,000 public repositories. The detection was facilitated by an anomalous connection that had not appeared in any prior workflow run, highlighting the effectiveness of these security measures.

In response to the incident, organizations are being strongly advised to audit their environments for any potential execution of the compromised versions of axios. Security professionals have noted that there are zero lines of malicious code within the axios library itself, emphasizing that the attack’s danger lies in the external dependencies introduced by the malicious versions.

This incident is being described as one of the most operationally sophisticated supply chain attacks ever documented against a top-10 npm package. As the software development community continues to grapple with the implications of this breach, the focus remains on enhancing security measures to prevent similar incidents in the future.

The post Axios: Malicious Versions of Published on npm appeared first on newscri.

Eric Schmidt claims that the best programmers no longer write code but instead focus on writing specifications and setting evaluation criteria, allowing AI to handle the coding tasks. This shift highlights a significant transformation in the programming landscape, where AI is increasingly taking over roles traditionally filled by human engineers.

In a recent discussion, Schmidt described a startup programmer whose AI was able to complete tasks that would have taken six months and required ten engineers at Google. This example underscores the efficiency that AI brings to the table, drastically reducing the time and manpower needed for complex projects.

Schmidt argues that as AI continues to evolve, top programmers will become more valuable, not less. “Top programmers will become more valuable, not less,” he stated, emphasizing that their roles will shift towards high-level system orchestration and business automation.

He further elaborated that AI’s most significant impact will be in automating the “boring” backbone of business operations, including billing, accounting, and logistics. This automation is expected to streamline processes and reduce costs across various industries.

On March 16, 2026, NVIDIA announced the launch of NemoClaw, a new stack designed for the OpenClaw agent platform, during the GTC event held in San Jose, California. This development is poised to enhance the capabilities of autonomous AI agents by integrating robust privacy and security controls.

NemoClaw simplifies installation, requiring just a single command to set up. This ease of use is expected to encourage broader adoption among developers and organizations looking to implement AI solutions securely. The platform can operate on various systems, including NVIDIA RTX PCs, DGX Station, and DGX Spark, making it versatile for different computing environments.

The introduction of NemoClaw is a response to growing concerns regarding the privacy and security of AI technologies. As noted by NVIDIA, NemoClaw integrates OpenClaw into their open agentic stack, utilizing the NVIDIA Agent Toolkit software. This integration allows for the use of any coding agent, thereby broadening the scope of applications for developers.

OpenClaw, which debuted in 2025, was previously known as Clawd and Moltbot before its final rebranding. Jensen Huang, CEO of NVIDIA, remarked, “OpenClaw opened the next frontier of AI to everyone and became the fastest-growing open source project in history.” This statement underscores the rapid evolution and acceptance of the platform within the tech community.

In addition to enhancing functionality, NemoClaw is designed to provide a secure version of OpenClaw, addressing the critical need for safety in AI applications. Kari Briski from NVIDIA highlighted that “Nvidia OpenShell is a new open source safety and security runtime for agents,” which further emphasizes the company’s commitment to security.

NemoClaw’s architecture allows it to run both in the cloud and locally, providing flexibility for developers and organizations. This dual capability ensures that users can choose the deployment method that best fits their operational needs.

NVIDIA’s official statement indicated that NemoClaw is meant to tackle the privacy and security concerns that have been prevalent in discussions surrounding OpenClaw. The company stated, “This provides the missing infrastructure layer beneath claws to give them the access they need to be productive, while enforcing policy-based security, network and privacy guardrails.” This approach aims to create a safer environment for the deployment of autonomous AI agents.

As the tech industry continues to evolve, the introduction of NemoClaw marks a significant step forward in the development of secure AI systems. The first reactions from the community have been positive, with many expressing anticipation for the potential applications of this new stack in various sectors.

The post NemoClaw: A New Frontier for Autonomous AI Agents appeared first on newscri.

Atlassian has announced layoffs affecting about 10% of its global staff, translating to nearly 1,600 employees. This significant reduction in workforce is part of a broader strategy aimed at boosting investment in artificial intelligence (AI) and improving the company’s financial position. The layoffs will impact workers in various regions, including North America, Australia, and India, with over 900 positions cut specifically from software research and development.

Reasons Behind the Decision

The decision to lay off a substantial portion of its workforce comes as Atlassian faces mounting financial pressures. The company has not turned a profit since 2017 and has seen its shares fall by more than 50% in 2026. This decline in market value has prompted the company to reassess its operational strategies and focus on areas that promise future growth, particularly in AI and enterprise sales.

Financial Implications

The restructuring is expected to result in charges of $225 million to $236 million, reflecting the costs associated with the layoffs. Despite the immediate financial burden, Atlassian’s leadership believes that these changes are necessary for the long-term sustainability of the company. Mike Cannon-Brookes, co-founder and co-CEO, stated, “We are doing this to self-fund further investment in AI and enterprise sales, while strengthening our financial profile.”

Employee Support

For the employees affected by the layoffs, Atlassian has committed to providing a minimum severance package of 16 weeks’ salary. Cannon-Brookes acknowledged the difficulty of this decision, saying, “This is the right decision for Atlassian. But that doesn’t mean it’s easy.” The layoffs will impact experienced professionals who have contributed significantly to the company’s growth.

Changing Workforce Dynamics

Cannon-Brookes emphasized that the company’s approach to AI is not about replacing people but rather adapting to the changing landscape of skills required in the tech industry. He noted, “Our approach is not ‘AI replaces people’. But it would be disingenuous to pretend AI doesn’t change the mix of skills we need or the number of roles required in certain areas.” This reflects a broader trend in the tech sector, where companies are increasingly integrating AI into their operations.

Context of the Layoffs

Atlassian’s layoffs are part of a larger narrative within the technology sector, where many companies are reevaluating their workforce and operational strategies in response to economic pressures. The company’s struggles in 2026, including a significant drop in market value, have led to a critical juncture where tough decisions are necessary to ensure future viability.

Looking Ahead

As Atlassian moves forward with its restructuring plans, the long-term effects of these layoffs on the company’s culture and operational efficiency remain to be seen. Details remain unconfirmed regarding how the company will navigate the transition and what further developments may arise in the coming months. The tech industry will be watching closely to see how Atlassian adapts to these challenges and positions itself for future growth.

The post Atlassian Layoffs: Company Cuts 10% of Workforce Amid Financial Struggles appeared first on newscri.

Atlassian has announced layoffs affecting approximately 10% of its global workforce, translating to nearly 1,600 employees. This significant reduction comes as the company faces mounting financial pressures, with its shares falling by more than 50% in 2026. The layoffs will primarily impact workers in software research and development, with over 900 positions cut in this area alone.

Reasons Behind the Layoffs

The restructuring initiative is aimed at boosting investment in artificial intelligence (AI) and improving Atlassian’s overall financial position. Mike Cannon-Brookes, co-founder and co-CEO of Atlassian, stated, “We are doing this to self-fund further investment in AI and enterprise sales, while strengthening our financial profile.” This strategic shift reflects the company’s need to adapt to changing market demands and technological advancements.

Atlassian has not reported a profit since 2017, and the recent layoffs are expected to incur charges ranging from $225 million to $236 million. The company’s ongoing financial struggles have prompted this drastic measure, as it seeks to realign its resources and focus on areas that promise growth, such as AI.

Impact on Employees

Employees affected by the layoffs will receive a minimum severance package of 16 weeks’ salary. This decision has been difficult for the leadership, as Cannon-Brookes remarked, “This is the right decision for Atlassian. But that doesn’t mean it’s easy.” The company acknowledges the contributions of those being let go, with Paul Inglis, a senior executive, noting that these are experienced professionals who have played a crucial role in building one of Australia’s most successful technology companies.

Global Reach of Layoffs

The layoffs will impact workers in various regions, including North America, Australia, and India, highlighting the global nature of Atlassian’s operations. As the company restructures, it aims to maintain its competitive edge in the technology sector, which has seen rapid changes due to advancements in AI and other technologies.

Future Developments

While Atlassian’s leadership has outlined its strategy for future growth, uncertainties remain regarding the long-term effects of these layoffs on the company’s culture and productivity. Details remain unconfirmed about how the remaining workforce will adapt to the changes and whether further layoffs might occur as the company continues to navigate its financial challenges.

The decision to lay off a significant portion of its workforce marks a pivotal moment for Atlassian as it seeks to redefine its business strategy in the face of financial adversity. The company’s commitment to investing in AI may position it for future success, but the immediate impact on its employees and operations will be closely watched in the coming months.

The post Atlassian Layoffs: Company Cuts 10% of Workforce Amid Financial Struggles appeared first on newscri.

New Developments

OpenAI has released two new models, GPT 5.4 Thinking and GPT 5.4 Pro. The GPT 5.4 Thinking model is specifically designed for enterprise work, such as coding and overseeing AI agents. This release is positioned as OpenAI’s most factual model yet, with responses being 18% less likely to contain errors compared to its predecessor, GPT 5.2.

One of the key features of GPT 5.4 is its support for agentic activity, which allows it to operate using less computing power, thereby reducing costs. OpenAI stated that this efficiency means it can more effectively support complex tasks.

Furthermore, the Thinking version of GPT 5.4 presents an upfront plan of reasoning, allowing users to make adjustments based on the model’s thought process. It supports up to 1 million tokens of context, significantly enhancing its usability for detailed inquiries.

Performance and Integration

Performance benchmarks indicate that GPT 5.4 outperforms earlier models, with OpenAI claiming it improves deep web research for specific queries. The Pro version is tailored for professionals who require maximum performance in their applications.

Additionally, GPT 5.4 is integrated into the API and Codex, expanding its accessibility for developers and enterprises alike. OpenAI has also secured a $200 million deal with the defense department, indicating the model’s potential applications in critical sectors.

Reactions and Future Outlook