X：阿易 AI Notes

Starting June 15, paid Claude plans can claim a dedicated monthly credit for programmatic usage. The credit covers usage of: - Claude Agent SDK - claude -p - Claude Code GitHub Actions - Third-party apps built on the Agent SDK

incognito chat with meta ai coming to WhatsApp + Meta AI app! people use AI to discuss personal topics and we want to make sure they ca do that privately. excited about this one!

The Google Threat Intelligence Group has detected the first known instance of a threat actor using an AI-developed zero-day exploit in the wild. While the attackers planned a wide-scale strike, our proactive counter-discovery may have prevented that from happening. This finding is part of our new report on AI-powered threats.

Damn！所有AI开发者，立刻停下你手里的npm install🤯 现在正在爆发有史以来最恐怖的供应链攻击， 代号Mini Shai-Hulud， 已经波及TanStack全家桶、Mistral AI、UiPath等170多个npm和PyPI包， 全是你们天天装的工具链， 周下载量加起来超过一个亿， 已经不是传统的维护者账号被盗了， 而是整个GitHub Actions CI管道被直接劫持， 合法的官方项目，自己发布了带毒的版本， 还带完整的SLSA 3级可信证明， 所有传统的签名验证全失效， 最狠的是它的持久化机制， 它不会只藏在node_modules里， 它会直接修改你的~/.claude/settings.json和~/.vscode/tasks.json， 就算你npm uninstall删光所有包， 只要你下次打开Claude或者VS Code， 它就会自动重新执行， 如果你敢撤销被盗的token， 它会直接删光你整个home目录， 而且它是蠕虫， 偷到一个项目的CI密钥，就会自动感染下一个， 现在还在指数级扩散， 以前我们说别用latest，别用^， 现在就算你pin死了版本， 只要那个版本是6分钟窗口期内发布的， 就是带毒的， 越依赖AI Agent自动装包的人， 这次中招的概率越高， 因为你的Agent根本不会帮你检查lockfile， 现在立刻做这三件事， 第一，冻结所有包安装， 第二，跑npx supply-chain-attack全盘自查， 第三，全量旋转你所有的云密钥、GitHub token和SSH key， 一个都别漏。 #网络安全 #npm #AI开发者

我等了整整一年的东西，终于来了， Cursor今天正式发布了它的SDK， 这回可远不只是又一个编程工具的小更新， 可以说是人类历史上第一次， 把生产级的编程能力，变成了可以随便嵌入的基础设施， 以前你只能在Cursor编辑器里用它的Agent， 现在你可以把同一个Agent， 塞进你的CI流水线， 塞进你的自动化脚本， 塞进你自己的产品里， 甚至塞进任何你能想到的地方， 最狠的是， 它用的是和桌面端完全一样的runtime， 一样的harness， 一样的模型， 你在编辑器里看到Agent有多聪明， 你嵌入到产品里的Agent就有多聪明， 不用自己搭沙箱， 不用自己做上下文管理， 不用自己写工具调用， 所有Cursor过去一年踩过的坑， 打磨过的所有细节， 现在全部免费开放给你了， 可能很多人还没意识到这件事的分量， 这么说吧，过去所有的编程Agent， 都只是在编辑器里帮你写代码， 但从今天开始， Agent可以在任何地方写代码， 它可以在后台自动修bug，自动提PR， 可以在用户点击按钮的时候，实时生成功能， 可以在CI失败的时候，自己修复构建错误， 充当开发者的角色，第一次从写代码的人，变成了指挥Agent写代码的人， 现在Cursor也不再只是一个更好的VS Code， 它正在变成整个AI编程时代的操作系统， 这意味着我们所有人，都站在了一个新时代的门口🚪🚀💻🤖 Video

有人总是担心这波存储，踏空了，怎么办？ 别担心。 AI时代才刚刚开始。 永远都有机会。

We gave people tiny computers at Code with Claude. Here are some of the small, delightful things they built: Video

x.com/i/article/205421931875…

There will be no AI jobpocalypse. The story that AI will lead to massive unemployment is stoking unnecessary fear. AI — like any other technology — does affect jobs, but telling overblown stories of large-scale unemployment is irresponsible and damaging. Let’s put a stop to it. I’ve expressed skepticism about the jobpocalypse in previous posts. I’m glad to see that the popular press is now pushing back on this narrative. The image below features some recent headlines. Software engineering is the sector most affected by AI tools, as coding agents race ahead. Yet hiring of software engineers remains strong! So while there are examples of AI taking away jobs, the trends strongly suggest the net job creation is vastly greater than the job destruction — just like earlier waves of technology. Further, despite all the exciting progress in AI, the U.S. unemployment rate remains a healthy 4.3%. Why is the AI jobpocalypse narrative so popular? For one thing, frontier AI labs have a strong incentive to tell stories that make AI technology sound more powerful. At their most extreme, they promote science-fiction scenarios of AI “taking over” and causing human extinction. If a technology can replace many employees, surely that technology must be very valuable! Also, a lot of SaaS software companies charge around $100-$1000 per user/year. But if an AI company can replace an employee who makes $100,000 — or make them 50% more productive — then charging even $10,000 starts to look reasonable. By anchoring not to typical SaaS prices but to salaries of employees, AI companies can charge a lot more. Additionally, businesses have a strong incentive to talk about layoffs as if they were caused by AI. After all, talking about how they’re using AI to be far more productive with fewer staff makes them look smart. This is a better message than admitting they overhired during the pandemic when capital was abundant due to low interest rates and a massive government financial stimulus. To be clear, I recognize that AI is causing a lot of people’s work to change. This is hard. This is stressful. (And to some, it can be fun.) I empathize with everyone affected. At the same time, this is very different from predicting a collapse of the job market. Societies are capable of telling themselves stories for years that have little basis in reality and lead to poor society-wide decision making. For example, fears over nuclear plant safety led to under-investment in nuclear power. Fears of the “population bomb” in the 1960s led countries to implement harsh policies to reduce their populations. And worries about dietary fat led governments to promote unhealthy high-sugar diets for decades. Now that mainstream media is openly skeptical about the jobpocalypse, I hope these stories will start to lose their teeth (much like fears of AI-driven human extinction have). Contrary to the predictions of an AI jobpocalypse, I predict the opposite: There will be an AI jobapalooza! AI will lead to a lot more good AI engineering jobs, and I’m also optimistic about the future of the overall job market. What AI engineers do will be different from traditional software engineering, and many of these jobs will be in businesses other than traditional large employers of developers. In non-AI roles, too, the skills needed will change because of AI. That makes this a good time to encourage more people to become proficient in AI, and make sure they’re ready for the different but plentiful jobs of the future! [Original text in The Batch newsletter.]

🚨 There's a major attack going on via npm right now. Do not install any packages right now. Talk to your agent ASAP and check if you're vulnerable or have been compromised. This is urgent ‼️

I hope you guys understand that this is going to keep getting worse