AI Weekly Malaysia

A Pew Research study analyzing ~500,000 English-language web pages from Common Crawl found that 35% of pages published after ChatGPT's November 2022 launch show significant signs of AI authorship or heavy editing, versus ~10% in a random sample that includes older pages. .com domains showed AI authorship at roughly 10x the rate of other domains. The findings align with Cloudflare's recent report that bot web traffic has overtaken human traffic.

Why: If you publish or scrape web content, assume a large and growing fraction of the English-language web is AI-generated—especially .com pages—which affects SEO strategy, training data quality, content trust signals, and any pipeline that ingests or ranks web content. For builders using web data for AI training or RAG, this signals accelerating contamination of public corpora.

Independent developer Théo Ducreux's ValidateHTML project crawled the 5,000 most-visited web domains (per the Tranco list) and found 87.2% have at least one HTML spec violation, with only 2.6% returning zero errors and zero best-practice warnings. Over a third failed accessibility checks—20.4% are missing image alt text and 41.6% lack ARIA labels for page regions—making pages broken for screen readers even when they render fine in Chrome.

Why: If you ship web frontends to EU customers, the 2025 European Accessibility Act turns these accessibility failures into legal liability, not just bad practice. Run an HTML validator and an accessibility audit (e.g., axe, Lighthouse) on your pages before your next release—41.6% of top sites missing ARIA labels means your site probably does too.

Socket Threat Research identified 40 malicious Firefox extensions impersonating Web3 wallets like OKX, Rabby Wallet, and TronLink to steal recovery phrases, private keys, and clipboard data. The campaign, active since March 2026, used Supabase projects as remote switches and Cloudflare Workers for exfiltration, with some extensions initially published as innocuous sports-score utilities before being repurposed into wallet-stealing malware under the same Firefox ID.

Why: If you build or ship browser extensions, the repurposing tactic here—publishing a benign utility first, then updating it to malicious functionality under the same extension ID—is a supply-chain pattern worth auditing in your own extension review processes. For anyone in Web3, avoid installing wallet extensions from Firefox's marketplace without verifying publisher identity against official sources, since 40 confirmed malicious add-ons passed through the official store.

Air Theremin is a browser-based instrument you play by waving both hands at a webcam or tilting a phone's gyroscope, with hand spread controlling volume, hand height controlling pitch, and gestures for vibrato and tone. It also falls back to mouse input and runs on a plain laptop webcam. It was created by Pavel Gurov and is based on theremin.site.

Why: It's a compact, working demo of in-browser hand tracking and device gyro APIs without plugins or installs—useful as a reference if you're building gesture-controlled UIs or webcam-based interactions, but there's no code, library, or API exposed here to reuse directly.

Sun Clock is a free, ad-free 24-hour web clock that visualizes sun position, sunrise/sunset, golden hour, twilight, and moon phase/times for your location. It adjusts its rotation direction based on hemisphere, works as an installable Progressive Web App, stores all location data locally with no cookies, and its source is MIT-licensed.

Why: If you need a lightweight, privacy-respecting sun/moon timing reference for outdoor work, photography, or scheduling, this runs entirely client-side and is installable offline as a PWA. For builders, the MIT-licensed source and PWA-with-zero-server-state approach is a concrete example to study, but there is no API or SDK to integrate into your own apps.

The article traces the history of Finger, a 1971 protocol from Stanford's AI Lab that let users check who was online and read their .plan and .project text files—effectively the first social network. The protocol still works today, with clients preinstalled on macOS, most Unix systems, and Windows, and public hosts like happynetbox.com letting anyone publish without a server.

Why: There is no practical action item for working builders here; it is a nostalgic history piece. At most, a vibe coder could try `finger random@happynetbox.com` for curiosity, but nothing in the text suggests you should adopt or change anything in your stack.