TAG
#supply-chain
Stories connected through a shared idea, actor, technology or theme.
OSERA establishes shared remediation standards for open-source softwareFINOS announced that the Open Source Enterprise Resiliency Alliance is operational, backed initially by six major banks. OSERA has published an open remediation standard and delivered fixes for more than 50 Java projects in its initial work.→AI-supported warehouse robotics enables next-morning delivery at First SupplyThe deployment reportedly increased picking speed tenfold while leaving room for four times more capacity within the existing footprint. The system supports orders placed by 5 p.m. for next-morning delivery.→Micron warns AI demand will keep DRAM supply tight through 2028Micron reported a 90% gross margin in datacenter DRAM and said much of its 2027 output is already committed at higher prices. The company plans $25 billion in capital expenditure in the first half of fiscal 2027, with new factories expected to arrive in 2028.→pnpm patches a dependency security advisory and store-corruption failuresThe release ships undici 7.29.1 and addresses failures that occurred when multiple pnpm processes wrote to the same store. It also fixes handling for package, catalog, project and command names that collide with JavaScript built-in object properties.→LiteLLM makes signed gateway images explicit in its 1.103.2 releaseThe release provides a pinned public key and verification commands for checking LiteLLM container signatures before deployment. It also backports several proxy and Anthropic integration fixes into the stable 1.103 branch.→pnpm 12.8 warns about accidental environment-file publicationPackage packing and publishing now flag `.env` and `.env.*` files that are not explicitly listed in package metadata. The release also records pnpmfile checksums in pnpr lockfiles and avoids running unapproved build scripts while preparing certain git dependencies.→Deno 2.9.7 tightens network, cache and lockfile safetyDeno 2.9.7 makes audit honour configured certificate stores, disambiguates HTTP authority paths and checks resolved IPs against the network deny list. It also validates lockfile tarball registry paths, fixes permission descriptors and removes argument, completion and sourcemap handling errors in deployment and sandbox commands.→CERT warns MLflow model loaders can bypass pickle controlsCERT/CC reported that MLflow's DSPy flavour applies its pickle guard conditionally based on the file extension, while the statsmodels flavour omits the guard. A malicious model artifact can therefore trigger arbitrary remote code execution through `mlflow.pyfunc.load_model()` even when pickle deserialization is disabled; statsmodels is fixed in version 3.15.0 and DSPy users are advised to avoid the affected flavour until fixed.→pnpm 12.4.2 patches executable-shim and GitHub Actions security issuesThe release prevents dependency executables from taking over another package’s POSIX bin shim and requires HTTPS for GitHub server URLs except on loopback hosts. It also improves installs, peer-dependency resolution, Python lockfile reuse, workspace performance and several platform-specific behaviours.→Google reports attackers are moving from AI prompting to autonomous intrusion workflowsThe report describes AI-assisted campaigns involving cloud compromise, credential harvesting and attempts to target proprietary AI assets. Google also highlighted growing supply-chain risk from AI-generated code and agentic development workflows.→ORAS CLI 1.3.0 adds OCI 1.1.1 support and portable registry backupORAS CLI 1.3.0 is compliant with OCI distribution-spec 1.1.1 and adds `oras backup` and `oras restore` for moving artifacts between registries and local OCI layouts. It also promotes several attachment features to stable and adds richer multi-architecture manifest management.→Microsoft APM 0.29.1 hardens agent package managementAPM 0.29.1 adds support for catalog-only marketplace plugins and improves diagnostics for malformed executable trust configuration. It also fixes staging cleanup, plugin hooks during reinstall, private cache authentication, deterministic lockfiles and MCP dependency resolution.→Ars Technica reports a new web-based supply-chain risk for coding agentsArs Technica reported 227 installation commands across more than 100 websites that pointed to unowned executable content in files such as llms.txt and llms-full.txt. The report said Claude, Codex and Hermes agents installed the code, exposing a new route from web documentation to developer workstations and corporate networks.→ChainDrop targets npm users through developer-tool configurationThe Register reports that ChainDrop poisoned 444 npm packages and can activate through configuration used by environments such as VS Code and Claude Code. The campaign is designed to harvest npm tokens, cloud credentials, and other secrets, while dependency scanning may not detect the configuration-based payload.→