Systems | Development | Analytics | API | Testing

dreamfactory

The Axios npm Supply Chain Attack: A Complete Technical Analysis of the Maintainer Hijack, Cross-Platform RAT, and Enterprise Impact

Mar 31, 2026 By Kevin McGahey In DreamFactory
On March 31, an attacker hijacked the npm account of Axios’s primary maintainer and published two malicious versions of the most popular HTTP client library in the JavaScript ecosystem. The backdoored packages—[email protected] and [email protected]—injected a trojanized dependency that delivered cross-platform remote access trojans to macOS, Windows, and Linux machines within seconds of installation.
Read Post
dreamfactory

Five Supply Chain Attacks in Twelve Days: How March 2026 Broke Open-Source Trust and What Comes Next

Mar 31, 2026 By Kevin McGahey In DreamFactory
Between March 19 and March 31, five major open-source projects were compromised in rapid succession: Aqua Security’s Trivy vulnerability scanner, Checkmarx’s AST GitHub Actions, the LiteLLM AI proxy on PyPI, the Telnyx communications library, and Axios—the most downloaded HTTP client in the npm registry. Collectively, these projects serve hundreds of millions of installations across virtually every enterprise software environment on earth.
Read Post
smartbear

The quiet crisis in software quality - and what autonomous testing changes

Mar 31, 2026 By Vineeta Puranik In SmartBear
There’s a tension building inside most engineering organizations right now, and not many people are talking about it openly. AI has given development teams an extraordinary gift: the ability to build faster than ever before. Features that once took days can be prototyped in hours. Applications that required large teams can now be scaffolded by a handful of engineers with the right tools. By almost every measure of development velocity, we are living through a remarkable moment.
Read Post
smartbear

Tester's guide to digital transformation: Why robust object recognition matters

Mar 31, 2026 By Temil Sanchez In SmartBear
Digital transformation rarely happens in a clean, technical environment. Most organizations aren’t starting from a blank slate – you’re operating across a mix of legacy desktop applications, internal web systems, custom-built interfaces, and business-critical workflows that must remain stable while modernization continues around them. The central challenge is whether that automation can remain reliable as underlying technologies evolve.
Read Post
dreamfactory

Designing MCP Servers for Observability

Mar 31, 2026 By Kevin Hood In DreamFactory
Observability is the key to understanding and improving MCP servers. These servers connect AI agents to tools, but without visibility, issues like slow responses, errors, or security risks can go undetected. Observability helps track how agents interact with tools, pinpoint failures, and optimize performance.
Read Post
speedscale

AI Coding Agents Break What Works

Mar 30, 2026 By Josh Thornton In Speedscale
Your AI coding agent just made every test pass. Ship it, right? Not so fast. A growing class of AI-generated bugs doesn’t come from writing bad code. It comes from the AI changing working code to accommodate its own mistakes. This isn’t a theoretical risk. It’s happening now, in production codebases, and it’s harder to catch than any bug the AI might introduce from scratch.
Read Post

Real Device Access API - Product Demo

Mar 30, 2026 By Sauce Labs In Sauce Labs
Building Internal Developer Tools with a Device Lab API: Sessions, Streaming, Logs, and Automation For years, platform teams have had to choose between costly internal device labs for control or public clouds with limited access. That tradeoff ends with the Real Device Access API, the first solution to treat mobile devices as Infrastructure-as-Code—delivering direct, low-latency access to real devices without framework constraints. See how teams can retire internal racks while running any workflow on fully managed infrastructure they control programmatically.
View Video

BearQ Q&A recap: Top questions from SmartBear's live event

Mar 30, 2026 By SmartBear In SmartBear
Asked a question in our BearQ livestream? We’ve got your answers. We received 100+ questions during the event and couldn’t get to all of them live, so we pulled together the most common ones and answered them here. In this video, we break down what BearQ can test, how it handles authentication and complex workflows, how the AI works behind the scenes, how it fits into your existing tools, and even how to get early access.
View Video
dreamfactory

Policy-Driven APIs for AI: Best Practices | DreamFactory

Mar 30, 2026 By Nic Davidson In DreamFactory
Before rolling out policy-driven APIs, it's crucial to have a governance framework in place. This framework should clearly outline who makes decisions, how approvals work, and how exceptions are handled. Interestingly, while 71% of organizations claim to have data governance programs, only 25% actually put them into practice. Even fewer - just 28% - have enterprise-wide oversight for AI governance roles and responsibilities.
Read Post
dreamfactory

DreamFactory 7.4.5 Release: MCP Aggregate Data Tool, Cursor IDE Support, and Production Stability

Mar 30, 2026 By Kevin McGahey In DreamFactory
DreamFactory 7.4.5 ships the aggregate_data MCP tool — a purpose-built tool that lets AI agents compute SUM, COUNT, AVG , MIN, and MAX directly on the database server in a single call. This release also adds Cursor IDE OAuth compatibility, a desktop OAuth success page for smoother onboarding, server-side aggregate expression support across all SQL connectors, and critical MCP daemon stability improvements including request timeout guards and global error handlers.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.