Open-source models deserve first-class infra. OrcaRouter now supports @SiliconFlowAI as an inference partner in our routing marketplace. SiliconFlow is particularly strong at serving OSS models fast and efficiently — making it a great fit for prompt-aware routing. Route across 150+ models and providers with one OrcaRouter API: • OpenAI-compatible • Zero markup • Prompt-aware routing • Open source Right model. Every prompt.

🚨 ACTIVE INCIDENT: The Mini Shai-Hulud worm is back, and it just compromised dozens of official @tanstack npm packages This is the first documented self-spreading npm worm that carries valid SLSA provenance attestations. Let that sink in. Our OSS Package Security Feed detected the compromised releases and we're tracking the spread in real time. Here's what happened: The attacker staged an obfuscated 2.3 MB credential-stealing payload in a fork of TanStack/router, then used hijacked OIDC tokens to publish malicious versions through TanStack's own legitimate GitHub Actions release pipeline. The compromised packages include @tanstack/react-router, @tanstack/router-core, @tanstack/react-start, and 40+ other packages. Millions of weekly downloads across the ecosystem. If you installed any affected version in CI, assume all secrets in that environment are compromised. Rotate tokens immediately. Full technical analysis, IOCs, compromised version list, and recovery steps on our blog. The list of affected packages is still growing.

my take on subq is that it’s not that big of a deal that someone benchmaxxed a linear attention model on mrcr v2 and swebench people have already shown that you can take an oss model and linearize it without crazy perf loss pretty cheaply just not that useful in practice

Georgia, this is it. Today is Election Day and your vote can help elect @ReverendWarnock and Jon @Ossoff to the U.S. Senate. Make your voice heard today and vote—either in person or by dropping off your mail-in ballot at a ballot drop box.