vibehacker
News
Noma Labs ·

Noma Labs details SneakPeek, a patched Claude Code Desktop preview flaw that leaked local secrets

A poisoned HTML file padded past 256KB in a public repo could run JavaScript in Claude Code Desktop's preview pane when you asked Claude to look at it, silently reading SSH keys, cloud credentials, and Claude's own OAuth tokens. Anthropic rated it CVSS 8.7, and the final fix shipped Aug 17 in Claude Desktop 1.30096.1 and later, so make sure your app has updated.

More news

View all

Vercel Daemons public beta: long-running container workers on Fluid compute

Vercel Daemons entered public beta on Oct 15 for long running pull based workers—Vercel Queues consumers, Celery/BullMQ/Kafka, Temporal, or self hosted CI runners—as containers on Fluid compute alongside your app. Declare replicas per region in vercel.json; Vercel builds the image, keeps that count, and restarts crashes (production only during beta)…

Vercel Changelog

Cognition launches Devin Oncall to investigate alerts and open fix PRs

Launched Oct 15, Devin Oncall kicks off when an alert, bug report, or incident fires, digs through your telemetry, code, deploys, runbooks, and past incidents for the root cause, then remediates and opens a fix PR for review. It works with Datadog, Dynatrace, and Sentry out of the box, can be triggered by PagerDuty, and needs a one time org setup that takes about 1–2 hours while Devin learns your systems…

Vercel Connect adds MCP Events public beta for webhook subscriptions

Vercel Connect now supports MCP Events in public beta, so apps and agents can subscribe to webhook events from compatible MCP servers—Connect creates and renews subscriptions, verifies webhooks, and forwards authenticated deliveries. You can also expose event discovery and subscription APIs as agent tools via Connect’s MCP Events adapter…

Vercel Changelog

Bluesky Attie expands to AI-built websites, games, and social apps on AT Protocol

At TechCrunch Disrupt, Bluesky expanded Attie beyond custom feeds so anyone can vibe code websites, quizzes, games, and polls that live on AT Protocol and tap Bluesky’s distribution. Creators stay tied to their ATProto identity, can bring their own model or open weights, and CEO Toni Schneider framed it as “social vibe coding” for a group rather than solo apps…

TechCrunch

Spotted something we missed? Start a thread.