Read Before Monday #114: Project Gus investigates why a Griffin Technology iMate…; in Every… — Inside: Project Gus investigates why a Griffin Technology iMate…; in Every that AI automation creates more expert human…; product… https://t.co/yPmrILUhAk #AgenticAI#AI
Microsoft has identified a npm supply chain compromise impacting 90+ redhat-cloud-services/* packages, including patch-client 4.0.4, insights-client 4.0.4, rbac-client 9.0.3, host-inventory-client 5.0.3, frontend-components 7.7.2, and others. The payload is a self-propagating worm that infects other npm packages and self-publishes.
Each compromised package adds a malicious preinstall hook, embedding an index.js script in the package.json that silently executes “node index.js” during installation, downloads Bun, and runs a payload that steals secrets from npm, GitHub, Amazon Web Services (AWS), and Secure Shell (SSH). The added code bloats index.js from ~8KB to ~4.3MB, acting as a heavily obfuscated ROT-9 eval loader.
If any of the compromised packages are installed, users and organizations should assume compromise, rotate credentials, revert to a previously trusted version, and block compromised packages. Identified compromised npm packages have been taken down, and we continue to work with the npm team. Microsoft continues to investigate this attack and will publish updates as more information is available.
Today has been the hottest day in May on record with Kew Gardens provisionally reaching 34.8°C - exceeding the previous highest May temperature in the UK by a full 2 degrees Celsius🌡️
This heat would be exceptional in the UK even in mid summer, let alone in May📈
Read Before Monday #113: advertising was not the web’s original sin, but the…; Japanese… — Inside: advertising was not the web’s original sin, but the…; Japanese companies diversify so widely because they…; snarky, over-familiar… https://t.co/Lws59DMfj5 #agenticweb#AI
Read Before Monday #112: Senior career status is shifting from managing people to…; How a… — Inside: Senior career status is shifting from managing people to…; How a bundled streaming subscription repeatedly…; America has moved… https://t.co/XxGbvksrOe #AI#FutureofWork
@LisaForteUK@wesstreeting@JohnRentoul I find this awkward when ministers disagree with the PM that asked them to join the gov and still be an MP... but anyway, I'm certain Wes can detail all the Palantir agreement he did to share all our PII NHS data with. looking forward to have more Iron Mountain deals
Announcing the first OpenAI Codex Community Meetup in London. This Thursday 14th May @ Kings Cross
we've got some special guests & surprises in store for this launch event
get ready for some hardcore goblinmaxxing
link below
Read Before Monday #111: generative AI is allowing workers to appear productive…; Mario… — Inside: generative AI is allowing workers to appear productive…; Mario Zechner discusses the creation of Pi, a highly…; Natural Language… https://t.co/vFlB8oZLV9 #AI#DeveloperTools