Google Opens Gemma 4 Under Apache 2.0 as Anthropic Scrambles After Claude Code Leak

Google Gemma 4 Goes Apache 2.0 — A Game-Changer for Open-Source AI

Google dropped a bombshell on April 2nd by releasing Gemma 4 under the Apache 2.0 license — a dramatic departure from the restrictive custom license that made enterprises nervous about deploying previous Gemma versions. The move effectively removes all commercial usage barriers, positioning Gemma 4 as the most permissively licensed frontier-class open model available today.

The model family includes a 31B Dense variant, a 26B Mixture-of-Experts option, and two edge-optimized versions (E4B and E2B). Google claims 4x speed improvements over previous generations, 60% better battery efficiency on mobile devices, and support for over 140 languages with video and audio capabilities. Models are already available on Hugging Face, Kaggle, Ollama, and Google AI Studio.

The Apache 2.0 licensing is the real headline here. Enterprises that previously hesitated to build on Gemma due to legal uncertainty now have a clear, well-understood license. Combined with Google's claims of competitive performance in agentic workflows, Gemma 4 could significantly accelerate the open-source AI ecosystem.

Source: Agentic AI Hype, Mean CEO Blog

Anthropic's Claude Code Leak: 512,000 Lines Exposed via npm Error

Anthropic is still managing fallout from what may be the most embarrassing security incident in AI lab history. On March 31st, a misconfigured .npmignore file in Claude Code v2.1.88 pushed a 59.8 MB source map to the npm registry, while a public cloud storage bucket simultaneously exposed the full source code — 512,000 lines in total.

The leak spread at staggering speed. Within hours of discovery, a GitHub mirror had accumulated 50,000 stars, and an estimated 16 million people accessed the exposed code. Making matters worse, a supply-chain attack compromised the axios package during the same window: users who installed or updated Claude Code between 00:21 and 03:29 UTC may have pulled a trojanized version containing a Remote Access Trojan.

Anthropic maintained that "no sensitive customer data or credentials were involved or exposed," characterizing it as "a release packaging issue caused by human error, not a security breach." But the timing was doubly awkward — the leak came just days after Anthropic accidentally revealed details about Claude Mythos, its next-generation model reportedly featuring 10 trillion parameters.

Security firm Adversa AI's Red Team has since discovered a critical vulnerability in Claude Code stemming from the exposed source, raising questions about the downstream security implications of the incident.

Source: Axios, The Hacker News, Fortune

GPT-5.4 Surpasses Human Performance on Desktop Tasks

OpenAI's GPT-5.4 series is now fully deployed, and the numbers are impressive. The "Thinking" variant, which uses test-time compute, scored 75.0% on the OSWorld-Verified desktop task benchmark — a 27.7 percentage point jump from GPT-5.2 and the first time an AI model has surpassed human-level performance on this metric.

GPT-5.4 can operate as a truly autonomous agent, navigating file systems, browsers, and terminal interfaces at the operating system level. It also scored 83% on the GDPVal benchmark, which measures performance on complex economic and professional tasks.

Meanwhile, Google's Gemini 3.1 Pro isn't far behind — it currently leads 13 of 16 major benchmarks and ties GPT-5.4 Pro on the Artificial Analysis Intelligence Index at roughly one-third of the API cost. The benchmark wars are heating up, and the gap between frontier models continues to narrow even as absolute capabilities surge ahead.

Source: devFlokers, RenovateQR

DeepSeek V4: A Trillion Parameters for $5.2 Million

DeepSeek V4, a one-trillion-parameter Mixture-of-Experts model, has been released with open weights under the Apache 2.0 license — and the price tag is the real story. The model was reportedly trained for an estimated $5.2 million, a fraction of the $100 million-plus budgets typical of frontier model training runs.

Performance is competitive with US-based frontier models, continuing DeepSeek's trend of delivering more capability per dollar than anyone else in the industry. The release adds further pressure on commercial AI labs to justify their pricing, especially as models like DeepSeek V4 and Gemma 4 offer high performance under permissive open-source licenses.

Source: devFlokers, Mean CEO Blog

California Moves to Set National AI Rules as Federal Tensions Rise

California Governor Gavin Newsom signed a new AI executive order this week requiring companies that want state contracts to disclose their policies on content distribution, model bias, and civil rights protections. The move positions California as the de facto national testing ground for AI regulation.

The timing is politically charged: the White House unveiled a federal AI legislative framework last month — the TRUMP AMERICA AI Act — which would preempt nearly all state-level AI laws. California is pushing ahead regardless, with Newsom framing the executive order as "raising the bar for AI companies seeking to do business with the state."

Meanwhile, states across the country are advancing their own AI bills. Georgia has three AI-related bills heading to the governor's desk, Idaho has approved four, and Utah ended its session with nine AI bills sent for signing — covering everything from chatbot disclosure to banning insurance decisions made solely by AI.

Source: Axios, Transparency Coalition

Share this article