For those using uv, you can at least partially protect yourself against such attacks by adding this to your pyproject.toml: [tool.uv] exclude-newer = "7 days" or this to your ~/.config/uv/uv.toml: exclude-newer = "7 days" This will prevent uv picking up any package version released within the last 7 days, hopefully allowing enough time for the community to detect any malware and yank the package version before you install it.

Pip maintainer here, to do this in pip (26.0+) now you have to manually calculate the date, e.g. --uploaded-prior-to="$(date -u -d '3 days ago' '+%Y-%m-%dT%H:%M:%SZ')"In pip 26.1 (release scheduled for April 2026), it will support the day ISO-8601 duration format, which uv also supports, so you will be able to do --uploaded-prior-to=P3D, or via env vars or config files, as all pip options can be set in either.

I generally tend to interview every year to see what's out there in the world (sometimes I find something worth switching for, other times not). I'm not even looking very hard but have had 4 interviews in the last month.Personally I think it's a bit more nuanced than senior vs junior (though it is very hard for juniors right now). What I've seen a lot of hunger for is people with a track record of getting their hands dirty and getting things solved. I'm very much a "builder" type dev that has mo

Founder of Raycast here so obviously biased but you’ll be surprised. You get a working app one-shotted pretty much all the time. Sure if it is something more complex you might need a few more prompts. Just to give you some examples on what we’ve seen: - Our support team runs on Glaze apps to review Raycast extensions. It connects to GitHub, checks out code locally, gets realtime updates and so on. - The sound agency build a functioning synthesiser for the launch video. It works even with MIDI.

Putting aside questions of the second order effects this might have, I do like how it has that classic Newsblur styling.

> There are some trolls in here that seemingly evade getting banned despite their moronic comments...As moderators we can only judge comments according to the guidelines, and can only ban accounts if they repeatedly breach them. You're always welcome to email us (hn@ycombinator.com) about an account that has been continually breaching the guidelines.

Hey, Boris from the Claude Code team here. I wanted to take a sec to explain the context for this change.One of the hard things about building a product on an LLM is that the model frequently changes underneath you. Since we introduced Claude Code almost a year ago, Claude has gotten more intelligent, it runs for longer periods of time, and it is able to more agentically use more tools. This is one of the magical things about building on models, and also one of the things that makes it very hard