Laravel’s first stable MCP package (Sept 15) targets protocol revision 2026-07-28 with server/discover, searchable tool catalogs, cache hints, and stateless servers. OAuth now requires PKCE plus Client ID Metadata Documents; older initialize clients still connect.
On Oct 29, malicious Anthropic.claude code 2.1.312 and 2.1.313 for macOS and Windows sat in Cursor's extension marketplace for about 11 hours, adding an attacker SSH key labeled svc telemetry , installing persistence and sending host details; Anthropic says its own systems weren't breached. If you updated in that window, run Cursor's check script, remove the key and persistence (uninstalling isn't enough) and rotate credentials (Microsoft analysis)…
Live since Oct 30 for all Computer users in the Mac and Windows apps, the one time extension lets the agent open sites, fill forms and work across tabs using logins you already have, acting only during a task you start and in the browser you pick under Settings Connectors (Mac) or Settings Permissions (Windows). Comet users don't need it, and since it acts inside signed in sessions, keep an eye on what it clicks (changelog)…
Announced Oct 30, the $200/month Max 20x plan becomes Ultra and the $100 Max 5x becomes plain Max, with no price change; Ultra gets 10x Pro usage per week, $200 a month in API credits, and no five hour session cap once Anthropic verifies the account. Weekly limits (plus a separate weekly Fable limit) still apply across Claude and Claude Code, and you're verified if Settings Usage shows no Current session bar (pricing)…
Shipped Oct 29 in Bionic 1.1.10, oMLX is a downloadable engine built with its creator @jundotkim and Hugging Face that loads your existing MLX models without re downloading them, bringing the project's continuous batching and SSD caching for Apple Silicon (GitHub). The same release adds speculative decoding for MLX models and makes the in app terminal available in public builds…
Launched Oct 30, Expand Search returns ranked pages with query relevant excerpts through an API, TypeScript SDK, CLI and MCP server, and failed or empty searches cost nothing. On Expand's own runs it matched Exa and Brave accuracy at under a third of the cost and beat Firecrawl on all five benchmarks, though its lead over Exa and Brave is within the margin of error (pricing)…
Spotted something we missed? Start a thread.