--- title: "[Dev Weekly #125] Qwen 27B Runs Locally and Crushes Benchmarks" url: https://daily.dev/posts/dev-weekly-125-qwen-27b-runs-locally-and-crushes-benchmarks-xxqpfjv8e source_url: https://blog.codeminer42.com/dev-weekly-125-qwen-27b-runs-locally-and-crushes-benchmarks-supply-chain-under-siege-duckdb-2-0-reshapes-analytics type: article source: "The Miners" published: 2026-08-20T20:22:32.474Z updated: 2026-08-20T23:02:31.543Z tags: ["security", "llm", "ruby", "duckdb", "qwen"] reading_time: 3 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # [Dev Weekly #125] Qwen 27B Runs Locally and Crushes Benchmarks **[The Miners](https://daily.dev/sources/miners)** · 3 min read · 0 upvotes · 0 comments ## Summary A weekly roundup covering a Bell Labs history documentary, a typosquatting attack that compromised 16 RubyGems and 37 npm packages to steal browser credentials and crypto wallet data, a preview of DuckDB v2.0's new server mode and VARIANT type, reflections from the C3 language creator on positioning, Simon Willison's review of Alibaba's Qwen 3.8 27B model, and several new dev tools including ArchSpec for Rails architecture linting, scriptc for compiling TypeScript to native binaries, and Cursor's new Origin git forge. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How did the recent RubyGems and npm typosquatting attack steal credentials? A coordinated typosquatting campaign compromised 16 RubyGems packages and 37 npm packages with info-stealing malware that targeted browser credentials, crypto wallets, and Telegram data. The attack exploited RubyGems allowing namespace reuse after a package is yanked, and an npm bin field vulnerability that lets attackers register unscoped command names. _Developers vetting dependencies for supply chain risks can follow security coverage like this on daily.dev._ ### What new features is DuckDB v2.0 adding? DuckDB v2.0, shipping in fall, adds a native server mode, a VARIANT type for semi-structured data, triggers, async I/O, and SQL dialect improvements. Together the client/server capabilities and async I/O performance gains expand what's practical for building analytical systems or working with remote data sources in DuckDB. _Teams planning analytics infrastructure upgrades can track DuckDB releases like this on daily.dev._ ### Why does Qwen 3.8 27B overthink simple tasks by default? Qwen 3.8 27B, an open-source model from Alibaba, ships with a default reasoning_effort setting that makes it excessively verbose and complicated even for simple tasks. Dialing that setting down reveals a strong local model that matches larger models on benchmarks and performs well on vision tasks and coding agent loops. _Developers choosing local LLMs for coding agents can compare model behavior like this on daily.dev._ ## Similar posts on daily.dev - [Codeminer42 Dev Weekly \#80](https://daily.dev/posts/codeminer42-dev-weekly-80-yebmsmmsd) · The Miners · 0 upvotes · 0 comments - [Codeminer42 Dev Weekly \#78](https://daily.dev/posts/codeminer42-dev-weekly-78-dnejxadc1) · The Miners · 1 upvotes · 0 comments - [\[Dev Weekly \#111\] TanStack npm supply-chain compromise](https://daily.dev/posts/dev-weekly-111-tanstack-npm-supply-chain-compromise-rsgcdrkve) · The Miners · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#llm](https://daily.dev/tags/llm), [#ruby](https://daily.dev/tags/ruby), [#duckdb](https://daily.dev/tags/duckdb), [#qwen](https://daily.dev/tags/qwen) [View this post on daily.dev](https://daily.dev/posts/dev-weekly-125-qwen-27b-runs-locally-and-crushes-benchmarks-xxqpfjv8e)