Cosmic Rundown: Axios Compromised, Claude Code Leaked, Ollama Goes MLX

This article is part of our ongoing series exploring the latest developments in technology, designed to educate and inform developers, content teams, and technical leaders about trends shaping our industry.

Axios got compromised on NPM. Claude Code's source code leaked via a source map. Ollama now runs on Apple's MLX framework. Oracle cut 30,000 jobs. Here's what developers are discussing today.

Axios NPM Package Compromised with Remote Access Trojan

Malicious versions of Axios appeared on NPM containing a remote access trojan. The compromised packages were designed to drop RAT malware on developer machines.

This is the latest in a growing pattern of supply chain attacks targeting popular JavaScript packages. If you're using Axios, verify your version and check your lockfiles. The detailed breakdown from StepSecurity covers the technical details and remediation steps.

Discussion on Hacker News

Claude Code Source Leaked Via NPM Source Map

Anthropic's Claude Code CLI tool had its source code exposed through a source map file published to NPM. The leak revealed internal implementation details of the AI coding assistant.

Source maps are supposed to help with debugging, not ship to production registries. This is a reminder to audit your build pipelines and ensure development artifacts stay out of published packages.

Discussion on Hacker News

Ollama Now Runs on Apple's MLX Framework

Ollama released MLX support for Apple Silicon in preview. This means local LLM inference can now leverage Apple's machine learning framework directly, potentially improving performance on M-series chips.

For developers running local models on MacBooks, this could mean faster inference and better memory efficiency. The Ollama blog post covers the implementation details.

Discussion on Hacker News

Oracle Cuts 30,000 Jobs

Oracle announced layoffs affecting 30,000 employees. The cuts span multiple divisions as the company restructures its workforce.

Large enterprise tech layoffs continue into 2026. For those affected, the discussion thread includes resources and community support.

Artemis II Safety Concerns Raised

A detailed analysis argues that Artemis II is not safe to fly in its current state. The post covers technical concerns about the crewed lunar mission.

NASA's return-to-Moon program faces ongoing scrutiny. The technical discussion explores specific engineering challenges that need resolution before crew safety can be assured.

Discussion on Hacker News

Quick Hits

• Microsoft Copilot terms update: Copilot is now officially for entertainment purposes only according to Microsoft's updated terms of service

• Chrome flags yt-dlp: Users report Chrome showing "suspicious download" warnings when downloading yt-dlp

• Solvespace in browser: The open source CAD tool now runs entirely in the browser via WebAssembly

• Google TimesFM: Google Research released a 200M-parameter time-series foundation model with 16k context window

• Do your own writing: A post arguing against AI-generated content is resonating with developers

Build Content Systems That Scale

If you're building applications that need intelligent content infrastructure, Cosmic provides a headless CMS with AI agents that research, write, and publish autonomously. Content, code, and automation from one platform.

Get started free or explore the documentation.