LiteLLM supply chain attack, last30days-skill is #1 on GitHub trending at +2,68, Meta's HyperAgents introduces recursive self-impro

LiteLLM supply chain attack (276 HN pts) — TeamPCP compromised the most popular LLM proxy (97M monthly downloads) via a cascading Trivy dependency attack. The AI supply chain is now a target-rich environment. Cisco released DefenseClaw the same day — security responses measured in hours.

last30days-skill is #1 on GitHub trending at +2,685 stars/day (10.2K total) — validates the 'single-purpose skill' pattern. Not a framework, not a harness, just one skill that does research. The Claude Code ecosystem now produces viral individual skills.

Meta's HyperAgents (121 HN pts) introduces recursive self-improvement — agents that rewrite not just their task code but their improvement procedure itself. Cross-domain transfer (robotics strategies improving math grading) is the unexpected result.

deer-flow accelerates to +2,394/day (48.3K stars) — ByteDance's SuperAgent is the fastest-growing multi-agent framework this week. Big tech agent race: Anthropic (Claude Code), ByteDance (deer-flow), Nvidia (NemoClaw), Meta (HyperAgents), Microsoft (AutoGen).

everything-claude-code crosses 100K stars (~108K) — two Claude Code ecosystem projects (superpowers + everything-claude-code) have crossed 100K in the same month. The plugin ecosystem grows faster than the underlying tool.

Stripe Projects launches (102 HN pts) — Stripe entering CLI-based infrastructure provisioning signals that developer platform tooling is the next contested territory. One CLI to provision hosting, databases, auth, analytics, and AI services.

Domain-specific agents break out: Dexter (financial research, 19K stars), pentagi (pentesting), Sashiko (kernel review). The shift from 'general agent framework' to 'agent that does one thing exceptionally' mirrors the vertical SaaS pattern.

RuView at 43K stars (+1K/day) — camera-free human sensing via WiFi CSI signals a privacy-preserving monitoring category. Rust + ESP32 ($1/node) makes it deployable at scale. Genuinely novel non-AI infrastructure.