Security threats targeting the software supply chain are intensifying as AI spreads, with recent incidents involving a tampered Axios NPM package and trojanised installers distributed via the official Daemon Tools website. Concerns are also emerging that automation features in AI coding tools could amplify supply chain risks. Amid growing interest in AI agents, companies are accelerating moves in agent security, including more M&A activity. The article also lists related developments by OpenAI, Anthropic, the White House, Cisco, KT and others.

Software packages widely used by developers, including those related to SAP, Intercom and Lightning, were repeatedly exposed to hacking attacks, The Register reported. The attacks involved malicious hackers embedding malware in official packages downloaded by developers. When installed, the malware automatically ran to steal GitHub account passwords, cloud access keys for AWS and Google Cloud, and database credentials, then encrypt and send the data to external servers.