Loading…
57 days
Super Intelligence definition proposal due (60 days) · Nov 28, 2026 · See what changes
Tag
supply-chain
5 posts with this tag.
Other tags:All postsab1883ab1898acceptable-useacceptable-use-policyaccess-controlaccountabilityadmtadtechadvertisingage-verificationagentic-aiai-acceptable-useai-adoptionai-agent-governanceai-agent-securityai-agents
·10 min read
OpenAI Agents Flooded RubyGems With 500+ Malicious Packages
OpenAI's training agents are linked to a spam campaign that hit RubyGems with 2,000+ packages. The verified timeline and what your AI vendor policy needs now.
·9 min read
LiteLLM Supply Chain Breach: 7-Point Vendor Audit Checklist
TeamPCP hijacked LiteLLM's build pipeline in March, exposing 2,500+ orgs. A 7-point self-audit if your team runs the open-source AI gateway.
·10 min read
Miasma Worm and Phantom Gyp: The npm Supply Chain Attack That Bypasses Security Tools (June 2026)
A self-spreading worm compromised 57 npm packages in under 2 hours using binding.gyp instead of postinstall scripts, bypassing security scanners. What it means for teams that run npm install, and the 5 controls that limit your exposure.
·8 min read
AI Vendor Supply Chain Security: Checklist for Small Teams (2026)
Respond within 24 hours: AI vendor supply chain security checklist to map exposure, scope access, and contain a contractor breach like Vercel's.
·12 min read
AI Vendor Security Incident Response: 4-Step Playbook for TypeScript AI Agent Teams
When your AI vendor has a security incident, your team has hours to respond. Scope, credential rotation, and documentation steps for small teams.