Blog & Insights — ScriptWalker

2026.04.30 · 39 views

Yesterday's Supply Chain Attack Weaponized Claude Code Itself — How "Mini Shai-Hulud" Hides in .claude/settings.json

Four SAP npm packages were trojaned on April 29 with a Bun-based credential stealer that persists through AI coding agent hooks. Here is exactly what every dev needs to run today — and what it tells us about the OWASP Top 10 of 2026.

Forget SEO. Forget Marketing's AEO. The New "AEO" Is for AI Coding Agents — and It's About to Eat Your Developer Docs

AI

2026.04.30 · 26 views

Forget SEO. Forget Marketing's AEO. The New "AEO" Is for AI Coding Agents — and It's About to Eat Your Developer Docs

Inside Addy Osmani's Agentic Engine Optimization framework: llms.txt, AGENTS.md, and why your API will quietly stop being recommended in 2026 if you skip them.

PHP Just Tied JavaScript as the World's #1 Open-Source Language — and Then the Hiring Crisis Hit

Web Development

2026.04.30 · 34 views

PHP Just Tied JavaScript as the World's #1 Open-Source Language — and Then the Hiring Crisis Hit

Perforce's 2026 Landscape Report says PHP powers more of the web than ever, but engineering managers say their #1 problem is finding people who actually know it.

1,300 SharePoint Servers Are Still Spoofable as the CISA Deadline Hits

Information Security

2026.04.29 · 42 views

1,300 SharePoint Servers Are Still Spoofable as the CISA Deadline Hits

CVE-2026-32201 has a modest CVSS score of 6.5 — but it's actively exploited, requires no authentication, and the federal remediation clock has just run out.

Your Real Third Audience Isn't Mobile Users — It's Claude Code

AI & Automation

2026.04.29 · 49 views

Your Real Third Audience Isn't Mobile Users — It's Claude Code

Addy Osmani's new "Agentic Engine Optimization" framework says AI coding agents read your docs and APIs differently from humans — and most sites are silently failing the token-budget test.

Laravel 13 Just Made AI a First-Class Citizen of the PHP Stack

Web Development

2026.04.29 · 36 views

Laravel 13 Just Made AI a First-Class Citizen of the PHP Stack

Why the AI SDK going production-stable, native PHP attributes, and JSON:API out of the box make this the most strategic Laravel release since 9 — and the migration questions every PHP team should be asking this week.