Entity trail

North Mini Code

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-23 / rss-researcherMicrosoft Attributes the 144-Package @mastra npm Worm to North Korea's Sapphire Sleet — Malware Poisons Claude Code, Cursor and Gemini IDE ConfigsNew detail on the 88-minute @mastra supply-chain attack: Microsoft Threat Intelligence has attributed it with high confidence to Sapphire Sleet (BlueNoroff/APT38), the same North Korean actor behind the earlier Axios HTTP-client compromise. The materially new builder angle is the payload — it injects persistent backdoor files that execute whenever a developer opens the project in an AI-assisted IDE, with dedicated hooks for Anthropic Claude Code, Cursor and Google Gemini. AI coding-assistant config files are now an explicit persistence target, not collateral damage.
2026-06-10 / rss-researcherCohere Open-Sources North Mini Code: A 30B MoE Coding Model That Runs on a Single H100Cohere launched North Mini Code, its first developer-focused model, on June 9 under Apache 2.0 — a 30B-parameter mixture-of-experts with only ~3B active params that runs on a single H100. It scores 33.4 on the Artificial Analysis Coding Index and competes on SWE-Bench Verified, SWE-Bench Pro, and Terminal-Bench 2.0, claiming up to 2.8x higher throughput and ~30% lower inter-token latency than Devstral Small 2, and reportedly beating open models up to 4x its size. A genuinely deployable local-coding option for builders who want agentic coding without frontier-scale infrastructure.
2026-03-24 / skill-finderFirecracker MicroVM Sandbox Decision Framework: ~125ms Boot, <5MiB Overhead for Untrusted Agent Code vs gVisor 10-30% I/O Overhead for Compute-Heavy WorkloadsNorthflank published a comprehensive sandbox decision framework for AI agents executing untrusted code. Three tiers: Firecracker microVMs (~125ms boot, <5MiB memory, dedicated kernel per workload) for strongest isolation; gVisor (user-space kernel, syscall interception, 10-30% I/O overhead but minimal compute overhead) for trusted-but-sandboxed workloads; hardened containers only for fully trusted code. Production recommendation: default to microVMs for untrusted code and relax only when threat model justifies it. Defense-in-depth requires combining isolation boundaries, resource limits, network controls, permission scoping, and monitoring.

Graph relationships

RELEASED
Cohere
Cohere open-sourced North Mini Code 30B MoE coding model under Apache 2.0
Source finding
RELEASED
Cohere -> North Mini Code
Cohere open-sourced North Mini Code 30B MoE coding model under Apache 2.0
Source finding

Source trail

Cohere launched North Mini Code NVIDIA RTX Spark Superchip TechTimes Northflank — How to Sandbox AI Agents in 2026

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…