GoKawiil - Tech News

1.

New IronWorm malware hits 36 packages in npm supply-chain attack (bleepingcomputer.com)

2026-06-04 | tags: ironworm, npm, supply-chain

2.

‘Tomatoflation’ is the latest extreme price increase to hit grocery bills. The reasons why are alarming (feeds.feedburner.com)

2026-06-03 | get Smart Digital Kitchen Scale → | tags: tomato prices, supply-chain disruptions, grocery bills

3.

Dozens of Red Hat packages backdoored through its official NPM channel (arstechnica.com)

2026-06-01 | get Red Hat NPM Security Kit → | tags: red hat, npm, supply-chain attack

4.

Red Hat npm packages compromised to steal developer credentials (bleepingcomputer.com)

2026-06-01 | get Red Hat Developer Security Kit → | tags: red hat, npm packages, shai-hulud

5.

GitHub introduces staged publishing and new install-time controls for NPM (news.ycombinator.com)

2026-05-22 | get NPM Package Manager → | tags: npm, github, staged publishing

6.

Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering (venturebeat.com)

2026-05-18 | get Cybersecurity Supply Chain Kit → | tags: supply-chain, openai, github actions

7.

SecurityScorecard Snags Driftnet to Level Up Threat Intelligence (darkreading.com)

2026-05-14 | get Cybersecurity Threat Intelligence Tool → | tags: securityscorecard, driftnet, threat intelligence

8.

Postmortem: TanStack NPM supply-chain compromise (news.ycombinator.com)

2026-05-11 | get TanStack Data Grid → | tags: tanstack, npm, supply-chain

9.

Postmortem: TanStack npm supply-chain compromise (news.ycombinator.com)

2026-05-11 | get TanStack React Table → | tags: tanstack, npm, supply-chain

10.

Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack (arstechnica.com)

2026-05-05 | get Daemon Tools Ultra → | tags: daemon tools, supply-chain attack, kaspersky

11.

DAEMON Tools trojanized in supply-chain attack to deploy backdoor (bleepingcomputer.com)

2026-05-05 | get DAEMON Tools Backup Key → | tags: daemon tools, supply-chain attack, trojanized software

12.

Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden (arstechnica.com)

2026-04-29 | get Checkmarx Secure Code Scanner → | tags: checkmarx, bitwarden, supply-chain attack

13.

Anthropic vs. the Pentagon: This Time, a US Court Has Ruled in the Government's Favor (wired.com)

2026-04-08 | by Paresh Dave | get AI Ethics and Policy Book → | tags: anthropic, pentagon, supply-chain

14.

Conflicting Rulings Leave Anthropic in ‘Supply-Chain Risk’ Limbo (wired.com)

2026-04-08 | by Paresh Dave | get AI Safety and Ethics Book → | tags: anthropic, supply-chain risk, pentagon

15.

Anthropic Supply-Chain Risk Label Should Stay in Place, Appeals Court Says (wired.com)

2026-04-08 | by Paresh Dave | get Supply Chain Risk Management Book → | tags: anthropic, supply-chain risk, pentagon

16.

AI has suddenly become more useful to open-source developers (news.ycombinator.com)

2026-04-01 | by Steven Vaughan-Nichols | get OpenAI GPT-4 API → | tags: open-source, ai programming, npm

17.

Opinion | Anthropic and Hegseth Need a Truce (feeds.content.dowjones.io)

2026-03-27 | tags: anthropic, hegseth, supply-chain

18.

Anthropic Supply-Chain-Risk Designation Halted by Judge (wired.com)

2026-03-26 | by Paresh Dave | tags: anthropic, department of defense, claude ai

19.

Anthropic Supply-Chain Risk Designation Halted By Judge (wired.com)

2026-03-26 | by Paresh Dave | get Supply Chain Risk Management Book → | tags: anthropic, department of defense, claude ai

20.

Pentagon’s ‘Attempt to Cripple’ Anthropic Is Troubling, Judge Says (wired.com)

2026-03-24 | by Paresh Dave | get Cybersecurity Defense Kit → | tags: anthropic, department of defense, ai tools

21.

Trivy supply-chain attack spreads to Docker, GitHub repos (bleepingcomputer.com)

2026-03-23 | get Docker Security Scanner → | tags: trivy, aqua security, docker hub

22.

AppsFlyer Web SDK hijacked to spread crypto-stealing JavaScript code (bleepingcomputer.com)

2026-03-14 | get Cybersecurity Web Monitoring Tool → | tags: appsflyer, web sdk, supply-chain attack

23.

Supply-chain attack using invisible code hits GitHub and other repositories (arstechnica.com)

2026-03-13 | get GitHub Security Monitoring Tool → | tags: github, npm, aikido security

24.

The Pentagon Claims That Anthropic’s ‘Soul’ Creates a Supply-Chain Risk. That Makes No Sense (gizmodo.com)

2026-03-13 | get AI Safety and Ethics Book → | tags: pentagon, anthropic, supply-chain

25.

Anthropic’s Pentagon Battle Matters to Every Business (feeds.content.dowjones.io)

2026-03-13 | get AI Safety and Ethics Book → | tags: anthropic, pentagon, artificial-intelligence

26.

Microsoft Backs Anthropic To Halt US DOD's 'Supply-Chain Risk' Designation (slashdot.org)

2026-03-13 | get Anthropic AI Cloud Service → | tags: anthropic, microsoft, u.s. department of defense

27.

Pentagon Formally Labels Anthropic Supply-Chain Risk (news.ycombinator.com)

2026-03-05 | get Quantum Computer → | tags: anthropic, supply-chain, pentagon