Claude writes 80% of its own code while someone plants backdoors in it

From the editor

Today's briefing contains a tension worth sitting with: Anthropic celebrates Claude autonomously writing 80% of its own code, a genuine inflection point, while an active supply chain attack targets Claude Code users via npm. The same ecosystem maturing fast enough to self-replicate is also attracting serious adversarial attention. Add a privacy policy change, elevated Opus 4.8 errors, and a LessWrong thread on weak safety regulations, and the meta-pattern is clear: rapid capability growth is outpacing the security and governance infrastructure around it.