Osmond van Hemert

Senior Software Engineer

I’m Osmond — a senior software engineer based in The Netherlands, with 30 years of experience and the last decade spent mostly remote. My day job is mostly TypeScript on Node, React, and Kubernetes; my evenings are AI coding agents, a homelab that I keep promising myself I’ll downsize, and trying to keep up with the supply-chain security news cycle. Since 2020 I write down what I learned — that’s this site.

Recent

Multi-Wave npm Supply Chain Attacks — IronWorm, Phantom Gyp, and the Erosion of Trust

18 June 2026·1648 words·8 mins

Security Security Supply Chain Security JavaScript

The Proof-of-Concept That Became Real — AI Worms and the Autonomous Threat Landscape

15 June 2026·2333 words·11 mins

Security AI Security Autonomous Systems

Researchers at the University of Toronto have demonstrated a working proof-of-concept: an AI worm that autonomously reasons about its environment, generates attack strategies, and replicates itself without human intervention. It operates entirely on open-weight local models. This is no longer theoretical.

US Government Halts Anthropic's Fable 5 & Mythos 5 — A Watershed AI Regulation Moment

13 June 2026·1019 words·5 mins

AI AI AI Industry & Regulation AI Models & Releases

US export-control directive forces Anthropic to suspend Fable 5 and Mythos 5 globally over alleged jailbreak—raising critical questions about government AI governance precedent.

LLM Agents in Production — Moving Beyond Chat Interfaces

8 June 2026·2331 words·11 mins

AI AI Development LLM

Multi-agent LLM systems are shifting from experimental chat interfaces to autonomous production systems. Here’s what production deployment actually looks like, and why the architectural patterns matter more than the models.

Anthropic's AI Vulnerability Discovery Framework — Automating Security at Code Level

6 June 2026·1742 words·9 mins

Security AI Cybersecurity Development

Anthropic released an open-source framework for automated vulnerability discovery powered by AI. This represents a fundamental shift in how security analysis can scale — from manual expert review to AI-assisted code hardening at development time.

↑