A developer released a WordPress plugin that replaces visible CAPTCHAs with a silent proof-of-work challenge, requiring visitors' browsers to solve a small cryptographic puzzle before submitting forms. The plugin claims to work across logins, registrations, comments, WooCommerce checkout and major form builders like Contact Form 7, WPForms and Gravity Forms by recognizing submission signatures rather than relying on per-plugin integrations, and it offers a manual mode to learn custom or unsupported forms.
wordpress.org
· 2026-10-22
Rank Math says some downloads of its paid SEO plugin, version 3.0.123, between October 15 at 20:02 UTC and October 16 at 07:12 UTC contained malware capable of implanting hidden backdoors once activated. The vendor pulled the affected files and issued a clean version, 3.0.124, while the free Rank Math SEO plugin used by over 4 million sites was not affected.
bleepingcomputer.com
· 2026-10-19
OpenRewrite is now distributing its modules through the Code Genome Project rather than Maven Central, requiring developers to add a new repository and authentication credentials to their builds. Maven Central remains necessary for resolving OpenRewrite's transitive dependencies, and a bill of materials artifact is published with each release to align module versions. The Gradle plugin is also now hosted on the Code Genome Project instead of the Gradle Plugin Portal.
docs.openrewrite.org
· 2026-10-15
Developer bealesh released neckbeard, a plugin for AI coding agents like Claude Code that analyzes an application's repository and generates reviewable cloud infrastructure plans with monthly cost estimates. It supports AWS, GCP, and Azure deployments via GitHub Actions or GitLab CI, using a bundled catalog of tested OpenTofu modules, and includes commands such as /neckbeard:analyze, /neckbeard:estimate, and /neckbeard:sync. The tool pairs AI-driven analysis with deterministic planning and validation code so the agent explains infrastructure rather than inventing it.
github.com
· 2026-10-14
A new beta plugin called Konnect lets AI assistants like Claude design schematics and PCBs in KiCad 10 through the Model Context Protocol, using a single Rust binary with 228 tools covering layout, routing, design-rule checks and manufacturing exports. Alongside it, a companion web-research MCP server called Nimrod offers quality-scored search and part/datasheet lookups to feed live data into the design process.
github.com
· 2026-10-14
LittleJS, a lightweight HTML5 game engine, has released its largest update yet, adding a full 3D renderer that shares the canvas with its existing 2D system. The update also includes built-in 2D and 3D level editors, a one-line particle effects library, a Three.js rendering plugin, and a reworked rendering core using batched WebGL2 sprites and instanced 3D drawing for faster performance.
frankforce.com
· 2026-10-13
Blokkily is a newly shown experimental digital audio workstation built around a single event model that synchronizes a tracker, piano roll, and step grid as one lane in a multi-track song. It supports CLAP as a required native plugin format alongside VST3 and SoundFont instruments, with sample-accurate parameter automation handled through dedicated plugin adapters, and includes an LLM-based composition assistant accessible via a prompt bar.
github.com
· 2026-10-12
EmDash now runs every submission to its official plugin registry through Cloudflare's Clef decision model before publication. Clef evaluates listing text, links, icons and screenshots against roughly a dozen categories including phishing, impersonation, hate speech, scams and moderation manipulation, assigning a probability score to each. Listings scoring 0.45 or higher in any category are escalated to a human operator rather than being blocked automatically.
emdashcms.com
· 2026-10-07
The MusicBrainz Picard team has released version 3.0 of its open-source music tagging tool. The update migrates the application from Qt5 to Qt6, introduces a redesigned plugin system, adds customizable columns with scripting support, and improves cover art handling and ISRC submission.
blog.metabrainz.org
· 2026-10-05
OpenAI unveiled updates at its Dev Day event that let developers build dedicated in-app experiences within ChatGPT using plugin extensions, giving third-party tools a spot in the sidebar and interactive panels including file viewers. The company also introduced a Plugin Creator tool, a redesigned submission process for its plugin directory, improved plugin ranking and recommendations, and support for the proposed MCP Events specification to trigger automations from connected apps.
techcrunch.com
· 2026-09-29
Patchstack disclosed a cross-site request forgery flaw in the Elementor Website Builder plugin, affecting versions 4.3.0 and 4.3.1, used on up to 2 million WordPress sites. The bug let attackers trick a logged-in administrator into clicking a malicious link that silently created a new admin account under attacker control. Elementor patched the issue in version 4.3.2, released two days after Patchstack's report.
bleepingcomputer.com
· 2026-09-25
ImpactGate is a new open-source tool that scores code changes for structural decay before they merge, running as a CLI, git pre-commit hook, or CI plugin for GitHub, GitLab, and Jenkins. It calculates an impact score based on files changed, existing complexity in the code being touched, cyclomatic complexity, and lines changed, making edits to already-bloated classes costlier than new additions.
github.com
· 2026-09-16
GoKawiil