@meta
  v: 1
  route: /episodes/2026-10-12-evys-morning-ai-brief
  generated: 2026-10-16T22:30:05.085Z
  ttl: 1h

@intent
  purpose:    Evy's Morning AI Brief #118: Zod Ships Malware: The Week The Trust Layer Broke
  audience:   developer, ai-engineer, agent-builder, agent, listener
  capability: listen, read, follow-sources, share

@state
  number: 118
  headline: Zod Ships Malware: The Week The Trust Layer Broke
  title: "Evy's Morning AI Brief #118 -- October 12, 2026"
  date: 2026-10-12
  runtime: 
  audio: /media/audio/2026/10/evy-show-118.mp3?v=20261012112741
  summary: "The Zod npm malware drop, one engineer's first-hand account of a Fable-era layoff, Karpathy on the widening capability gap, and decision models go multimodal."
  tags[2]: Agentic AI, AI Infrastructure
  source_count: 20
  sources[20]{title,publisher,url}:
    Zod 4.6.6 compromised by malware? (Hacker News discussion),Hacker News,https://news.ycombinator.com/item?id=50052814
    zod: suspicious commit d821685 'Fix bugs and improve performance',GitHub (colinhacks/zod),https://github.com/colinhacks/zod/commit/d821685ea6732436fcdf786a81d076958471e467
    Fable Took My Job,cendyne.dev,https://cendyne.dev/posts/2026-10-11-fable-took-my-jorb.html
    Fable Took My Job (Hacker News discussion),Hacker News,https://news.ycombinator.com/item?id=50053216
    The gap in shared understanding of LLM capability is widening (Karpathy),X (Andrej Karpathy),https://twitter.com/karpathy/status/2109361546505966046
    Karpathy LLM-capability-gap thread (Hacker News discussion),Hacker News,https://news.ycombinator.com/item?id=50047422
    "Meet Cloudflare Clef-omni: A 30B-A3B Multimodal Decision Model for Audio, Video, Image and Text",MarkTechPost,https://www.marktechpost.com/2026/10/11/cloudflare-clef-omni-multimodal-decision-model/
    What is Decision 3.0? vLLM Semantic Router's New Open Decision Models,MarkTechPost,https://www.marktechpost.com/2026/10/11/what-is-decision-3-0-vllm-semantic-routers-new-open-decision-models/
    TII Releases Falcon-ASR: 1.6B Arabic Speech Model Hits 20.92% WER,MarkTechPost,https://www.marktechpost.com/2026/10/11/tii-falcon-asr-arabic-speech-recognition/
    Pensieve: local code search and MCP context for AI coding agents,tedhaley.ca,https://tedhaley.ca/pensieve/
    Local Indexing to reduce tool calling and token usage (Hacker News discussion),Hacker News,https://news.ycombinator.com/item?id=50049508
    esp32-iphone-agent: let an AI model use a real iPhone with a $7 ESP32,GitHub (onehumanbeing/esp32-iphone-agent),https://github.com/onehumanbeing/esp32-iphone-agent
    mcd-coupon-strategist: McDonald's MCP order cost-optimization skill,GitHub (Ayzzz123/mcd-coupon-strategist),https://github.com/Ayzzz123/mcd-coupon-strategist
    mcd-git: order McDonald's with git commands,GitHub (zhutoumeme/mcd-git),https://github.com/zhutoumeme/mcd-git
    yobiru: let your agents talk over Tailscale,GitHub (chekusu/yobiru),https://github.com/chekusu/yobiru
    shrike: the open source debugger for web apps built with AI,GitHub (SumantxD/shrike),https://github.com/SumantxD/shrike
    SWE-Critix: Post-Training Generalist Verifiers for Assessing Coding-Agent Trajectories,arXiv,https://arxiv.org/abs/2610.13356
    X-AgentRed: Red-Teaming Personal Agents in Evolving Multi-Service Ecosystems,arXiv,https://arxiv.org/abs/2610.13886
    Step 5 Preview on OpenRouter (Oct 15 open-weights calendar),OpenRouter,https://openrouter.ai/stepfun/step-5-preview
    MarkTechPost Open Source technology category (standing scout lane),MarkTechPost,https://www.marktechpost.com/category/technology/open-source/

@actions
  - id: listen
    method: GET
    href: /media/audio/2026/10/evy-show-118.mp3?v=20261012112741
  - id: read_full_article
    method: GET
    href: /articles/2026-10-12-evys-morning-ai-brief-full.md
  - id: view_human
    method: GET
    href: /episodes/2026-10-12-evys-morning-ai-brief/

@context
  > The Zod npm malware drop, one engineer's first-hand account of a Fable-era layoff, Karpathy on the widening capability gap, and decision models go multimodal.

@nav
  self:      /episodes/2026-10-12-evys-morning-ai-brief.agent
  parents:   [/.agent, /archive.agent]
  peers:     [/episodes/2026-10-16-evys-morning-ai-brief.agent, /episodes/2026-10-15-evys-morning-ai-brief.agent, /episodes/2026-10-14-evys-morning-ai-brief.agent, /episodes/2026-10-13-evys-morning-ai-brief.agent]