Official SAP npm packages compromised to steal credentials

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...
The Hacker News

SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack

SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
The Caledonian-Record

Phancy Group Scales up Computing Resources to Strengthen API Business Momentum

HONG KONG SAR - Media OutReach Newswire - 30 April 2026 - Phancy Group Co., Ltd. (Stock Code: 6682.HK) announced today that it proposes to purchase GPU servers and related ...

ClickUp Data Leak Exposes Enterprise Emails for Over a Year

A hardcoded ClickUp API key exposed hundreds of corporate and government emails for over a year, raising new SaaS security ...
The Hacker News

New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

上海交通大学等机构开发出能"真正玩游戏"的AI程序员

这项由上海交通大学、浙江大学、腾讯光子工作室联合完成的研究，于2026年4月发表在ACM旗下期刊，论文编号为arXiv:2604.19742，感兴趣的读者可通过该编号查阅完整原文。
腾讯网

上海交通大学等机构开发出能“真正玩游戏”的AI程序员，传统测试 ...

这项由上海交通大学、浙江大学、腾讯光子工作室联合完成的研究，于2026年4月发表在ACM旗下期刊，论文编号为arXiv:2604.19742，感兴趣的读者可通过该编号查阅完整原文。说到底，让AI写代码这件事已经不算新鲜了。GPT系列、Claude系列 ...
腾讯网

深大与复旦联手打造的AI助手，凭什么用更少的“记忆力”干更多的活？

深圳安泊泰科技与复旦大学的研究团队提出了一套名为GenericAgent（简称GA）的全新AI智能体系统，试图从根本上解决这个问题。他们的核心主张用一句话来概括：AI的表现好不好，不取决于它能记住多少信息，而取决于它在有限的"记忆空间"里装了多少真正 ...