Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to detect such threats.

Claude Code’s March 2026 update adds Computer Use for controlling Mac apps without APIs and a 1M?token context window for huge projects.