
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@drawcall/uikitml
Advanced tools
Generate immersive 3D interfaces for Three.js, React Three Fiber, IWSDK, and more with HTML syntax. Perfect for AI workflows.
npx skills add drawcall-ai/uikitml
UIKitML is a small HTML-like format for spatial UI. AI agents can write it, validate it, preview it, and turn it into real 3D interface code.
prompt / Pencil design / .pen file
-> .uikitml
-> PNG preview
-> Three.js / React Three Fiber / IWSDK / more
Use it for AI-generated XR panels, dashboards, controls, and design-to-code workflows.
uikitml validate ./screen.uikitml --kit horizon
uikitml render ./screen.uikitml --kit horizon --out screen.png
uikitml convert ./screen.uikitml --kit horizon --name Screen --out Screen.tsx
uikitml convert ./screen.uikitml --to three --kit horizon --name createScreen --out screen.ts
Code:
import { parse, generate } from "@drawcall/uikitml";
const result = parse("<div><h1>Hello XR</h1></div>");
if (result.success) generate(result.ast);
Declare runtime TTF fonts with CSS @font-face, then use the family name in
attributes, inline styles, or stylesheet rules:
<style>
@font-face {
font-family: "Brand Sans";
src: url("/fonts/BrandSans-Regular.ttf");
font-weight: 400;
}
@font-face {
font-family: "Brand Sans";
src: url("/fonts/BrandSans-Bold.ttf") format("truetype");
font-weight: 700;
}
.title { font-family: "Brand Sans"; font-weight: 700; }
</style>
<h1 class="title">Launch ready</h1>
UIKitML supports .ttf URLs and the CSS font-family, src, and
font-weight descriptors. font-weight defaults to normal. Runtime and
vanilla Three.js conversion use TTFLoader. React conversion uses useTTF
and requires a Suspense boundary.
See the minimal editor source for a working multiple-weight example.
FAQs
Unknown package
The npm package @drawcall/uikitml receives a total of 671 weekly downloads. As such, @drawcall/uikitml popularity was classified as not popular.
We found that @drawcall/uikitml demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.