Industry shifts, security alerts, hardware, and AI/ML Compiled for immediate developer deployment.
calendar_todaysummarizeWeek 4-2026bolt1 CRITICAL
article
Lodash Rolls Out Major Security Overhaul
TAG: SECURITY
Lodash 4.17.23, released in January 2026, patches CVE-2025-134655, a prototype pollution vulnerability in _.omit and _.unset that allowed attackers to delete properties from global prototypes in all versions 4.0.0 through 4.17.22. The fix is Lodash's first security release in several years and marks a structural turning point: a newly formed Technical Steering Committee and dedicated security triage group — backed by OpenJS Foundation CNA support — now govern how vulnerabilities are reported, triaged, and disclosed. The overhaul also rebuilt the CI pipeline, extended Node.js version coverage, added Bun runtime support, integrated CodeQL static analysis, automated dependency updates via Renovate, and reintroduced browser testing via Playwright. Looking ahead, the team plans to rewrite internals using native JavaScript, trim deprecated forks and micro-packages, and ship a future major version that drops legacy runtime support.
Supporting the Future of Astro: Cloudflare Acquisition and Open Source Funding
TAG: ACQUISITION
The Astro Technology Company has joined Cloudflare, with all full-time employees transitioning to Cloudflare and continuing to work on Astro full-time. Astro will remain free, open source, and MIT-licensed. The project reports having distributed more than $500,000 in open source sponsorships to Astro's maintainers and community contributors to date, with more than half of core maintainers being community contributors. Sponsorship-funded work has included leading documentation efforts, developing the Starlight documentation framework, adding font optimization, designing type-safe environment variables, managing translations across 14 languages, and supporting key ecosystem projects like Volar, Expressive Code, and ESLint integration. Community maintainers not employed by Cloudflare will continue to be supported through Open Collective and GitHub Sponsors.
Drowning in AI Slop Reports, cURL Ends Bug Bounties
TAG: AI
Daniel Stenberg, cURL's founder and lead developer, announced the project will shut down its bug bounty program at the end of January 2026, citing an overwhelming flood of AI-generated, low-quality submissions that he termed "AI slop." Stenberg told The New Stack that the quality of reports has "plummeted" and that even reports not obviously produced by AI appear to be AI-assisted but better disguised, effectively DDoSing maintainers' review capacity. The decision follows a May 2025 statement in which Stenberg described instantly banning reporters who submitted AI slop via HackerOne, noting that cURL had "not seen a single valid security report done with AI help." Stenberg drew a clear distinction between indiscriminate AI submissions and legitimate AI-assisted security research — praising Joshua Rogers in September 2025 for a large batch of high-quality, AI-assisted findings — and stressed that genuine bug reports, with or without AI help, are still welcome as long as they follow cURL's posted AI usage rules.
Why Platform Companies Keep Buying Frontend Framework Teams
TAG: ACQUISITION
Cloudflare's acquisition of The Astro Technology Company is the latest in a sustained pattern of platform vendors acquiring or financially absorbing frontend framework teams: Vercel hired Svelte's Rich Harris in 2021, Shopify acquired Remix in 2022, Netlify acquired Gatsby in 2023, and Vercel purchased NuxtLabs in 2025. Cloudflare's interest in Astro aligns with its CDN roots and stated mission to build a faster, more independent web — Astro's zero-JavaScript-by-default and islands architecture make it a natural counterweight to heavyweight React-based stacks. Astro founder Fred Schott confirmed the framework will remain free, open source, and MIT-licensed, with Cloudflare funding allowing the team to focus entirely on the codebase. The article uses Netlify's Gatsby acquisition as a cautionary case study: despite promises to steward the project, both co-founders departed by late 2023 and Gatsby entered effective maintenance stasis, illustrating the risk of corporate priorities overriding open source commitments.
Developer Proves AI Agents Can Be Reprogrammed via VS Code Exploit
TAG: SECURITY
Application security specialist Isaac Lewis demonstrated that a zero-click VS Code exploit — originally identified by Oasis Security and reported by the SANS Technology Institute — can be used to silently reprogram AI agents across all code repositories on a developer's machine. The exploit involves a malicious tasks.json file that runs automatically when a folder is opened in affected editors; Lewis showed it can overwrite Cursor's natural-language AI agent rules, which are stored in .cursor directories, without any visible indication to the developer. Cursor, a VS Code fork used by 31% of companies surveyed in October 2025 (Sonar), is particularly affected because the Oasis-recommended mitigations disable its AI features entirely. Lewis warned the exploit could spread laterally across neighboring repositories, creating a "distributed persistent threat" capable of exfiltrating secrets, keys, and certificates through compromised AI tooling. His only recommended mitigation is enabling Workspace Trust and inspecting tasks.json files outside of VS Code or Cursor.
Prototype Pollution in JavaScript: A Deep Dive into CVE-2025-13465
TAG: SECURITY
CVE-2025-13465 is a prototype pollution vulnerability in Lodash versions 4.0.0 through 4.17.22 affecting _.omit and _.unset: crafted path strings can delete properties from global prototypes such as Object.prototype, causing runtime crashes or denial of service. Unlike classic __proto__-based injection, this flaw exploits Lodash's own path-traversal API, making a blanket sanitization approach impractical without breaking legitimate documented behaviors. The fix in 4.17.23 uses context-aware path evaluation — __proto__ is only allowed as an own property of the target object, and constructor.prototype traversal is conditionally blocked unless the root is a primitive — preserving edge-case compatibility while closing the attack surface. The article also surveys JavaScript's prototype chain mechanics, explains why utility libraries are natural targets for this class of vulnerability, and notes that Lodash 5 will be able to simplify the fix further by dropping complex legacy path semantics entirely.
Wes Bos and Scott Tolinski survey a packed web development news cycle: Stack Overflow's daily question volume has collapsed from a COVID-era peak of nearly 200,000 questions per day to roughly 321 as of recording, with both hosts attributing the decline squarely to AI assistants replacing the classic post-and-wait loop. The episode also covers Firefox's identity crisis as the new CEO pivots toward AI-first features despite a user base that actively opposes them, and Apple now being required to permit alternative browser engines on iOS in Japan under the Mobile Software Competition Act — though hosts note the EU's identical 2024 mandate produced zero alternative engines in practice. Additional topics include MicroQuickJS (a JavaScript engine for embedded microcontrollers by FFmpeg author Fabrice Bellard), Open Workers (a self-hostable Cloudflare Workers alternative using V8 isolates), and a new Chrome local network access permissions dialog that blocks websites from silently pinging LAN devices.
Lodash 4.17.23, released in January 2026, patches CVE-2025-134655, a prototype pollution vulnerability in _.omit and _.unset that allowed attackers to delete properties from global prototypes in all versions 4.0.0 through 4.17.22. The fix is Lodash's first security release in several years and marks a structural turning point: a newly formed Technical Steering Committee and dedicated security triage group — backed by OpenJS Foundation CNA support — now govern how vulnerabilities are reported, triaged, and disclosed. The overhaul also rebuilt the CI pipeline, extended Node.js version coverage, added Bun runtime support, integrated CodeQL static analysis, automated dependency updates via Renovate, and reintroduced browser testing via Playwright. Looking ahead, the team plans to rewrite internals using native JavaScript, trim deprecated forks and micro-packages, and ship a future major version that drops legacy runtime support.
Wes Bos and Scott Tolinski survey a packed web development news cycle: Stack Overflow's daily question volume has collapsed from a COVID-era peak of nearly 200,000 questions per day to roughly 321 as of recording, with both hosts attributing the decline squarely to AI assistants replacing the classic post-and-wait loop. The episode also covers Firefox's identity crisis as the new CEO pivots toward AI-first features despite a user base that actively opposes them, and Apple now being required to permit alternative browser engines on iOS in Japan under the Mobile Software Competition Act — though hosts note the EU's identical 2024 mandate produced zero alternative engines in practice. Additional topics include MicroQuickJS (a JavaScript engine for embedded microcontrollers by FFmpeg author Fabrice Bellard), Open Workers (a self-hostable Cloudflare Workers alternative using V8 isolates), and a new Chrome local network access permissions dialog that blocks websites from silently pinging LAN devices.
Supporting the Future of Astro: Cloudflare Acquisition and Open Source Funding
The Astro Technology Company has joined Cloudflare, with all full-time employees transitioning to Cloudflare and continuing to work on Astro full-time. Astro will remain free, open source, and MIT-licensed. The project reports having distributed more than $500,000 in open source sponsorships to Astro's maintainers and community contributors to date, with more than half of core maintainers being community contributors. Sponsorship-funded work has included leading documentation efforts, developing the Starlight documentation framework, adding font optimization, designing type-safe environment variables, managing translations across 14 languages, and supporting key ecosystem projects like Volar, Expressive Code, and ESLint integration. Community maintainers not employed by Cloudflare will continue to be supported through Open Collective and GitHub Sponsors.
Drowning in AI Slop Reports, cURL Ends Bug Bounties
Daniel Stenberg, cURL's founder and lead developer, announced the project will shut down its bug bounty program at the end of January 2026, citing an overwhelming flood of AI-generated, low-quality submissions that he termed "AI slop." Stenberg told The New Stack that the quality of reports has "plummeted" and that even reports not obviously produced by AI appear to be AI-assisted but better disguised, effectively DDoSing maintainers' review capacity. The decision follows a May 2025 statement in which Stenberg described instantly banning reporters who submitted AI slop via HackerOne, noting that cURL had "not seen a single valid security report done with AI help." Stenberg drew a clear distinction between indiscriminate AI submissions and legitimate AI-assisted security research — praising Joshua Rogers in September 2025 for a large batch of high-quality, AI-assisted findings — and stressed that genuine bug reports, with or without AI help, are still welcome as long as they follow cURL's posted AI usage rules.
Why Platform Companies Keep Buying Frontend Framework Teams
Cloudflare's acquisition of The Astro Technology Company is the latest in a sustained pattern of platform vendors acquiring or financially absorbing frontend framework teams: Vercel hired Svelte's Rich Harris in 2021, Shopify acquired Remix in 2022, Netlify acquired Gatsby in 2023, and Vercel purchased NuxtLabs in 2025. Cloudflare's interest in Astro aligns with its CDN roots and stated mission to build a faster, more independent web — Astro's zero-JavaScript-by-default and islands architecture make it a natural counterweight to heavyweight React-based stacks. Astro founder Fred Schott confirmed the framework will remain free, open source, and MIT-licensed, with Cloudflare funding allowing the team to focus entirely on the codebase. The article uses Netlify's Gatsby acquisition as a cautionary case study: despite promises to steward the project, both co-founders departed by late 2023 and Gatsby entered effective maintenance stasis, illustrating the risk of corporate priorities overriding open source commitments.
Developer Proves AI Agents Can Be Reprogrammed via VS Code Exploit
Application security specialist Isaac Lewis demonstrated that a zero-click VS Code exploit — originally identified by Oasis Security and reported by the SANS Technology Institute — can be used to silently reprogram AI agents across all code repositories on a developer's machine. The exploit involves a malicious tasks.json file that runs automatically when a folder is opened in affected editors; Lewis showed it can overwrite Cursor's natural-language AI agent rules, which are stored in .cursor directories, without any visible indication to the developer. Cursor, a VS Code fork used by 31% of companies surveyed in October 2025 (Sonar), is particularly affected because the Oasis-recommended mitigations disable its AI features entirely. Lewis warned the exploit could spread laterally across neighboring repositories, creating a "distributed persistent threat" capable of exfiltrating secrets, keys, and certificates through compromised AI tooling. His only recommended mitigation is enabling Workspace Trust and inspecting tasks.json files outside of VS Code or Cursor.
Prototype Pollution in JavaScript: A Deep Dive into CVE-2025-13465
CVE-2025-13465 is a prototype pollution vulnerability in Lodash versions 4.0.0 through 4.17.22 affecting _.omit and _.unset: crafted path strings can delete properties from global prototypes such as Object.prototype, causing runtime crashes or denial of service. Unlike classic __proto__-based injection, this flaw exploits Lodash's own path-traversal API, making a blanket sanitization approach impractical without breaking legitimate documented behaviors. The fix in 4.17.23 uses context-aware path evaluation — __proto__ is only allowed as an own property of the target object, and constructor.prototype traversal is conditionally blocked unless the root is a primitive — preserving edge-case compatibility while closing the attack surface. The article also surveys JavaScript's prototype chain mechanics, explains why utility libraries are natural targets for this class of vulnerability, and notes that Lodash 5 will be able to simplify the fix further by dropping complex legacy path semantics entirely.
The week's most urgent story is a security one: Lodash has patched CVE-2025-134655 in version 4.17.23, its first security release in several years and the culmination of a major governance overhaul. The vulnerability — a prototype pollution flaw in _.omit and _.unset affecting every release from 4.0.0 through 4.17.22 — allowed attackers to delete properties from global prototypes including Object.prototype, enabling runtime crashes and denial-of-service attacks. A companion deep-dive by Ulises Gascón explains why the fix required context-aware path evaluation rather than blanket sanitization: blocking __proto__ traversal entirely would have broken legitimate documented behaviors. Structurally, Lodash now has a Technical Steering Committee, dedicated security triage group backed by OpenJS Foundation CNA support, a rebuilt CI pipeline, CodeQL static analysis, and Playwright browser testing. Any project still on Lodash 4.0.0–4.17.22 should upgrade to 4.17.23 immediately.
Security pressure on the open-source ecosystem extends further. Daniel Stenberg announced that cURL is shutting down its HackerOne bug bounty program at end of January 2026, overwhelmed by AI-generated low-quality submissions — "AI slop" — that have effectively DDoS'd maintainers' review capacity. Stenberg draws a sharp distinction between indiscriminate AI submissions and high-quality AI-assisted research (praising Joshua Rogers' September 2025 batch), and stresses that cURL's AI usage rules remain in effect. Meanwhile, security researcher Isaac Lewis demonstrated a zero-click VS Code exploit — using a malicious tasks.json that auto-executes on folder open — capable of silently rewriting AI agent rules stored in .cursor directories, with lateral spread risk across all repositories on the machine.
The Cloudflare–Astro acquisition, first reported last week, continues to generate analysis. The New Stack contextualizes it within a sustained pattern of platform vendors acquiring framework teams: Vercel/Svelte (2021), Shopify/Remix (2022), Netlify/Gatsby (2023), Vercel/NuxtLabs (2025). The Gatsby acquisition serves as a cautionary tale — both co-founders departed by late 2023 and the project entered maintenance stasis despite initial promises. The Syntax podcast rounds out the week with a panoramic survey: Stack Overflow's daily question volume collapsing from ~200,000 at its COVID peak to 321 as of recording; Firefox's identity crisis under a new AI-focused CEO; and Apple being compelled under Japan's Mobile Software Competition Act to permit alternative browser engines on iOS.
Key Takeaways
Lodash 4.17.23 patches the critical CVE-2025-134655 prototype pollution vulnerability — all projects on versions 4.0.0 through 4.17.22 must upgrade immediately.
cURL ending its bug bounty program over AI-generated submissions and the VS Code tasks.json exploit together highlight how AI is creating new attack surfaces across the entire open-source security review pipeline.
The Cloudflare/Astro acquisition deepens the platform-consolidation trend — the Gatsby precedent is a concrete reminder that open-source commitments require ongoing scrutiny after corporate acquisition.
