Blog & Insights — ScriptWalker

2026.05.01 · 721 views

"Mini Shai-Hulud" Hit SAP's npm Packages — and Every PHP Team Should Read This Carefully

Why a JavaScript supply-chain worm is a wake-up call for input validation, third-party trust, and the entire CIA triad — even if you do not run Node

From Pair Programming to Orchestrating a Team — Cursor 3 and Claude Code Reset the Baseline in April

AI & Automation

2026.05.01 · 647 views

From Pair Programming to Orchestrating a Team — Cursor 3 and Claude Code Reset the Baseline in April

Ten parallel agents per developer is not a press-release flex; it is the new productivity baseline, and it is changing what "senior engineer" means

Laravel 13 Just Quietly Made Every PHP Shop an AI Shop

Web Development

2026.05.01 · 594 views

Laravel 13 Just Quietly Made Every PHP Shop an AI Shop

AI SDK, pgvector search, and passkeys land first-party — and the 10-minute upgrade path means there is no excuse left

Yesterday's Supply Chain Attack Weaponized Claude Code Itself — How "Mini Shai-Hulud" Hides in .claude/settings.json

Cybersecurity

2026.04.30 · 667 views

Yesterday's Supply Chain Attack Weaponized Claude Code Itself — How "Mini Shai-Hulud" Hides in .claude/settings.json

Four SAP npm packages were trojaned on April 29 with a Bun-based credential stealer that persists through AI coding agent hooks. Here is exactly what every dev needs to run today — and what it tells us about the OWASP Top 10 of 2026.

Forget SEO. Forget Marketing's AEO. The New "AEO" Is for AI Coding Agents — and It's About to Eat Your Developer Docs

AI & Automation

2026.04.30 · 503 views

Forget SEO. Forget Marketing's AEO. The New "AEO" Is for AI Coding Agents — and It's About to Eat Your Developer Docs

Inside Addy Osmani's Agentic Engine Optimization framework: llms.txt, AGENTS.md, and why your API will quietly stop being recommended in 2026 if you skip them.

PHP Just Tied JavaScript as the World's #1 Open-Source Language — and Then the Hiring Crisis Hit

Web Development

2026.04.30 · 507 views

PHP Just Tied JavaScript as the World's #1 Open-Source Language — and Then the Hiring Crisis Hit

Perforce's 2026 Landscape Report says PHP powers more of the web than ever, but engineering managers say their #1 problem is finding people who actually know it.

1,300 SharePoint Servers Are Still Spoofable as the CISA Deadline Hits

Cybersecurity

2026.04.29 · 591 views

1,300 SharePoint Servers Are Still Spoofable as the CISA Deadline Hits

CVE-2026-32201 has a modest CVSS score of 6.5 — but it's actively exploited, requires no authentication, and the federal remediation clock has just run out.

Your Real Third Audience Isn't Mobile Users — It's Claude Code

AI & Automation

2026.04.29 · 628 views

Your Real Third Audience Isn't Mobile Users — It's Claude Code

Addy Osmani's new "Agentic Engine Optimization" framework says AI coding agents read your docs and APIs differently from humans — and most sites are silently failing the token-budget test.

Laravel 13 Just Made AI a First-Class Citizen of the PHP Stack

Web Development

2026.04.29 · 524 views

Laravel 13 Just Made AI a First-Class Citizen of the PHP Stack

Why the AI SDK going production-stable, native PHP attributes, and JSON:API out of the box make this the most strategic Laravel release since 9 — and the migration questions every PHP team should be asking this week.