vibehacker
News
Ars Technica ·

Google AI Studio can now push vibe-coded Android apps to a private Play Store library, no developer account

Rolling out in the US and select markets to users 18+, apps built in AI Studio go straight to a Personal Library in the Play Store with no APK sideloading, $25 fee, or Google review, and sharing with a small group of friends and family is planned. Going public will mean onboarding to a developer profile and normal Play review, an option Google says arrives in the coming months (Google Play blog).

More news

View all

A PS5LM fork runs Qwen3.8-27B on a jailbroken PS5's GPU at about 20 tokens per second

Reddit user u/AdIllustrious7246 turned PS5LM, a llama.cpp port for jailbroken consoles, into a native app that drives the GPU through the PS5 Vulkan RADV port and can use up to 11.4 GiB of memory, up from about 6 GiB as a CPU payload; smaller models like Gemma 4 E4B and Llama 3.2 3B hit 61 and 124 tokens per second. It adds a live stats dashboard and works with llama.cpp's web UI, so other devices on your network can chat with it…

Tom's Hardware

MIKE, an open-source kanban harness, runs local-LLM coding agents inside gVisor sandboxes

Each card on MIKE's web kanban board is a task: pressing start runs an agent in a gVisor sandbox on its own Git worktree with a read only repo mount, retries failed tool calls, and parks stuck work in review for you. The author built it entirely with llama.cpp hosted local models and added client side rate limits, an offline friendly UI, and a bearer token REST API for starting tasks from scripts (Show HN)…

VS Code 1.141.1 patches 10 CVEs, including a Copilot agent hook-edit bypass and an MCP sandbox escape

CVE 2026 102232 let prompt injection get the Copilot agent to edit a lifecycle hook file without confirmation, and CVE 2026 102851 let one sandboxed MCP server use another server's approved network and write permissions; the rest are Workspace Trust bypasses and click to run RCEs. Update to 1.141.1 or later (check pinned dev containers too), then re approve each MCP server's permissions, since the fix ignores old shared grants…

Safeguard Blog

Safeguard makes MCP tool calls unlimited on every plan, including Free

As of Oct 18, agents connected to the supply chain security platform from Claude, ChatGPT, Cursor, or custom setups can run package, CVE reachability, and dependency checks with no monthly cap, per minute limit, or per call charge. Its API also moves to pay as you go, with 10,000 deterministic calls a month included and $0.10 per 1,000 after that…

Safeguard Newsroom

Spotted something we missed? Start a thread.