https://codema.ai/ai.htmlPublished articles from Codema.en-CAhttps://codema.ai/articles/litellm-supply-chain-attack-what-to-do.htmlhttps://codema.ai/articles/litellm-supply-chain-attack-what-to-do.htmlThu, 22 Oct 2026 00:00:00 +0000On Oct 21, 2026, a malicious LiteLLM 1.107.0 shipped to PyPI, Docker Hub and GHCR for a few hours. Here's how to check whether you pulled it, how to clean up, and which secrets to rotate.NewsJohn F.https://codema.ai/articles/deepseek-v4-1-flash-deepinfer.htmlhttps://codema.ai/articles/deepseek-v4-1-flash-deepinfer.htmlThu, 22 Oct 2026 00:00:00 +0000DeepSeek released DeepInfer, the inference engine behind its own service, plus a new V4.1 Flash checkpoint (1017). What the model card actually says, and the hardware DeepInfer needs.NewsJohn F.https://codema.ai/articles/claude-opus-5-5-for-builders.htmlhttps://codema.ai/articles/claude-opus-5-5-for-builders.htmlThu, 22 Oct 2026 00:00:00 +0000A practical guide to Claude Opus 5.5: what it costs per job, how to pick an effort level, and the four breaking changes to fix before you swap the model ID.Build GuidesJohn F.https://codema.ai/articles/claude-duet-explained.htmlhttps://codema.ai/articles/claude-duet-explained.htmlThu, 22 Oct 2026 00:00:00 +0000Claude Duet is a new Anthropic app where Claude checks your connected apps, sends a morning brief and runs tasks in the background, asking first before it sends, pays, signs or deletes. Here's what's in the research preview.NewsJohn F.https://codema.ai/articles/agent-skills-agentic-ai-foundation.htmlhttps://codema.ai/articles/agent-skills-agentic-ai-foundation.htmlThu, 22 Oct 2026 00:00:00 +0000Anthropic donated the Agent Skills standard to the Linux Foundation’s Agentic AI Foundation on Oct 22, 2026. What moved, who maintains it, and what to do with your skills.NewsJohn F.https://codema.ai/articles/what-is-agents-md-how-to-write-one.htmlhttps://codema.ai/articles/what-is-agents-md-how-to-write-one.htmlWed, 21 Oct 2026 00:00:00 +0000AGENTS.md is a Markdown file that tells AI coding agents how to work on your repo. What it is, which tools read it, and how to write one that works.Build GuidesCodema Editorialhttps://codema.ai/articles/utm-tracking-setup-guide.htmlhttps://codema.ai/articles/utm-tracking-setup-guide.htmlWed, 21 Oct 2026 00:00:00 +0000A UTM tracking setup for GA4: what each UTM parameter does, a lowercase naming convention to copy, auto-tagging rules, and launch checks for AI-built sites.Build GuidesCodema Editorialhttps://codema.ai/articles/run-coding-agents-safely-permissions-sandboxes.htmlhttps://codema.ai/articles/run-coding-agents-safely-permissions-sandboxes.htmlWed, 21 Oct 2026 00:00:00 +0000How to run coding agents safely with Claude Code permission modes, Codex sandbox and approval settings, deny rules, and habits that keep secrets out of reach.Build GuidesCodema Editorialhttps://codema.ai/articles/mcp-security-best-practices.htmlhttps://codema.ai/articles/mcp-security-best-practices.htmlWed, 21 Oct 2026 00:00:00 +0000MCP security best practices for vibe coders: prompt injection risks, what the MCP spec requires, and a checklist to use MCP servers without leaking data.Build GuidesCodema Editorialhttps://codema.ai/articles/git-github-basics-for-vibe-coders.htmlhttps://codema.ai/articles/git-github-basics-for-vibe-coders.htmlWed, 21 Oct 2026 00:00:00 +0000Git and GitHub basics for vibe coders: the commands you need, a branch-per-task workflow for coding agents, .gitignore for secrets, and push protection.Build GuidesCodema Editorialhttps://codema.ai/articles/ga4-predictive-audiences-google-ads.htmlhttps://codema.ai/articles/ga4-predictive-audiences-google-ads.htmlWed, 21 Oct 2026 00:00:00 +0000GA4 predictive audiences target users likely to buy or churn. The requirements, how to create one, and how to use it in Google Ads, from Google docs.Build GuidesCodema Editorialhttps://codema.ai/articles/back-up-supabase-database.htmlhttps://codema.ai/articles/back-up-supabase-database.htmlWed, 21 Oct 2026 00:00:00 +0000How to back up a Supabase database: what each plan backs up, how to export with supabase db dump, how to restore, and what backups leave out.Build GuidesCodema Editorialhttps://codema.ai/articles/add-mcp-server-cursor-claude-code-codex.htmlhttps://codema.ai/articles/add-mcp-server-cursor-claude-code-codex.htmlWed, 21 Oct 2026 00:00:00 +0000Step-by-step: how to add an MCP server to Cursor, Claude Code and Codex, with copy-paste config for the Supabase and GitHub MCP servers.Build GuidesCodema Editorialhttps://codema.ai/articles/what-are-agent-skills-write-your-first-skill.htmlhttps://codema.ai/articles/what-are-agent-skills-write-your-first-skill.htmlTue, 20 Oct 2026 00:00:00 +0000Agent skills are SKILL.md folders your AI agent loads on demand. Learn the format and write your first skill for Claude Code, Cursor and Codex.Skills & PromptsCodema Editorialhttps://codema.ai/articles/vibe-code-saas-supabase-vercel-weekend.htmlhttps://codema.ai/articles/vibe-code-saas-supabase-vercel-weekend.htmlTue, 20 Oct 2026 00:00:00 +0000A two-day plan to vibe code a SaaS with an AI agent, Next.js, Supabase and Vercel, including the Row Level Security steps most weekend builds skip.Build GuidesCodema Editorialhttps://codema.ai/articles/review-ai-written-code-before-production.htmlhttps://codema.ai/articles/review-ai-written-code-before-production.htmlTue, 20 Oct 2026 00:00:00 +0000A practical routine to review AI-generated code before production: access control first, then secrets, dependencies, errors, and agents reviewing agents.Build GuidesCodema Editorialhttps://codema.ai/articles/predictive-creative-testing-ai-ad-creatives.htmlhttps://codema.ai/articles/predictive-creative-testing-ai-ad-creatives.htmlTue, 20 Oct 2026 00:00:00 +0000Predictive creative testing uses AI to generate and pre-score ad creatives, then confirms the winners with real Google Ads or Meta experiments.Build GuidesCodema Editorialhttps://codema.ai/articles/own-your-code-and-data-building-with-ai.htmlhttps://codema.ai/articles/own-your-code-and-data-building-with-ai.htmlTue, 20 Oct 2026 00:00:00 +0000AI makes software cheap to build, so ownership matters more. Why to own your code and data, how to avoid vendor lock-in, and a checklist to get there.OpinionCodema Editorialhttps://codema.ai/articles/mcp-explained-for-vibe-coders.htmlhttps://codema.ai/articles/mcp-explained-for-vibe-coders.htmlTue, 20 Oct 2026 00:00:00 +0000What is MCP? The Model Context Protocol lets your coding agent use real tools like your database. How it works, how to connect a server, and how to stay safe.Build GuidesCodema Editorialhttps://codema.ai/articles/building-with-ai-in-french-quebec.htmlhttps://codema.ai/articles/building-with-ai-in-french-quebec.htmlTue, 20 Oct 2026 00:00:00 +0000How to build a bilingual app for Quebec with AI: OQLF French-language rules, Law 25 privacy duties, Next.js i18n patterns and resources.Build GuidesCodema Editorialhttps://codema.ai/articles/10-copy-paste-prompts-ship-web-app-with-ai.htmlhttps://codema.ai/articles/10-copy-paste-prompts-ship-web-app-with-ai.htmlTue, 20 Oct 2026 00:00:00 +0000Ten copy-paste AI coding prompts that take a web app from idea to production in Cursor, Claude Code or Codex: plan, schema, auth, tests, security, launch.Skills & PromptsCodema Editorial