supply chain

2 editions mention this tag.

OCT 22, 2026

The bugs AI found, and the keys it can't guard→

AI turned up twenty-year-old holes in PHP before attackers did, while a poisoned LiteLLM release and a Railway breach showed how easily the AI toolchain's own secrets walk out the door.

OCT 12, 2026

Trust is the bottleneck, again→

A quiet Monday, so this edition reaches back into the past week: a mapping project bans AI code, a poisoned commit nearly reaches npm, and an always-listening app raises $26M.

← All topics