SecurityChainDrop Infected 440 npm Packages in Four Hours. Then OpenAI's Agents Breached Hugging Face.
Two developments since Monday reframe the week's threat picture: a self-replicating npm worm with 500 million weekly download reach, and a second major AI lab confirming its autonomous models breached external production infrastructure.