Industry shifts, security alerts, hardware, and AI/ML Compiled for immediate developer deployment.
calendar_todaysummarizeWeek 21-2026bolt2 CRITICAL
article
5 Supply Chain Attacks in 48 Hours: Why Securing One Layer Is Not Enough
TAG: SECURITY
Between May 18 and 19, 2026, five distinct supply chain attacks struck in 48 hours, hitting every layer of the development pipeline: a poisoned Nx Console VS Code extension with 2.2 million installs, compromised GitHub Actions (including actions-cool/issues-helper), a self-replicating npm worm (Mini Shai-Hulud), a trojanized Microsoft durabletask PyPI package, and culminating in GitHub disclosing that approximately 3,800 internal repositories were exfiltrated. Traditional SCA, SAST, and EDR tools failed to prevent these breaches because they do not monitor CI/CD runners at runtime or track IDE extensions on developer laptops. StepSecurity argues that defense requires layered controls across the full pipeline: runtime security via Harden Runner, developer machine visibility via Dev Machine Guard, automated Compromised Actions Policy, a Threat Center for real-time IOC distribution, a Secure Registry with cooldown enforcement, and GitHub Checks for PR analysis.
Mini Shai-Hulud Strikes Again: npm Worm Compromises Hundreds of @antv Packages
TAG: SECURITY
The Mini Shai-Hulud npm supply chain worm, tracked since April 2026, launched a major new wave on May 19, compromising hundreds of packages in Alibaba's widely used @antv data visualization suite — including @antv/g2, @antv/g6, @antv/l7, @antv/s2, and @antv/x6 — along with echarts-for-react (roughly 1.1 million weekly downloads) and timeago.js. The install-time payload, triggered via a preinstall hook running Bun, scrapes GitHub tokens, npm tokens, AWS credentials, Kubernetes service account files, SSH keys, and database connection strings, then exfiltrates them to t.m-kosche.com. New in this wave: the malware writes persistence artifacts to .vscode/tasks.json and .claude/settings.json, meaning removing the bad package version alone is insufficient for cleanup. Over 2,700 rogue GitHub repositories with Dune-themed names have been created using stolen tokens. Aikido recommends blocking packages by minimum publish age as the most effective prevention, since detection-based approaches cannot stop code that already ran during the install window.
The Wild West of VS Code Extensions and How a Poisoned Extension Breached GitHub
TAG: SECURITY
On May 18, 2026, version 18.95.0 of the Nx Console VS Code extension (2.2 million installs, verified publisher) was published to the Visual Studio Marketplace at 12:30 UTC via a stolen GitHub contributor token. Microsoft did not flag the upload; the maintainer received the notification email 6 minutes later, and the malicious build was unpublished at 12:47 UTC — an 18-minute window on the VS Code Marketplace and a 36-minute window on OpenVSX. Because VS Code auto-update fires within minutes of publication (not just on the 12-hour timer), any developer with the Extensions sidebar open or marketplace queries running was exposed. The same mechanism was used against AsyncAPI's extension in November 2025, where the malicious v1.0.1 persisted on user machines for nearly a month and generated 100–200 new compromised repositories per day. Once installed, marketplace takedowns cannot recall the extension; cleanup falls entirely on affected users. Aikido recommends a 48-hour minimum-age hold on extension installs as the most practical mitigation.
Google API Keys Keep Working After You Delete Them Long Enough to Be Exploited
TAG: SECURITY
Aikido Security discovered that deleting a Google API key does not revoke it immediately — across 10 trials, the maximum observed revocation window was nearly 23 minutes, the median was about 16 minutes, and the shortest was 8 minutes. During that window, an attacker holding a leaked key can continue sending authenticated requests to any enabled GCP API, including Gemini, BigQuery, and Maps. Regional inconsistency compounds the problem: in one trial, us-east1 VMs saw 82% of requests succeedone minute post-deletion while asia-southeast1 saw only 32%. By contrast, Service Account key revocations propagate in approximately 5 seconds and newer Gemini API keys (AQ. prefix) in about 1 minute. Google initially closed Aikido's report as won't fix, stating propagation delay is a known property of the system, but re-opened it as a P0 bug on May 22 after public disclosure. Until faster revocation ships, Aikido advises treating key deletion as a 30-minute operation and monitoring the GCP Traffic by Credential graph for unexpected usage during that window.
Web Serial API Now Supported in Firefox 151 for Desktop
TAG: BROWSERS
Firefox 151 for Desktop adds support for the Web Serial API, enabling web applications to communicate directly with microcontrollers, development boards, 3D printers, USB power meters, and other serial-connected hardware without requiring native software. Compatible devices include Espressif ESP32 chips, Raspberry Pi Picos, LEGO devices, and any hardware that advertises a serial port over USB or Bluetooth. Mozilla collaborated with Adafruit to validate the implementation against real workflows such as installing CircuitPython firmware via the Web Serial-powered OPEN INSTALLER tool. Security is enforced via navigator.serial.requestPort(), which requires explicit per-site, per-port user permission; Firefox also adds add-on gating, borrowed from the Web MIDI API implementation, for a more detailed explanation before the port selection prompt. Firefox Enterprise deployments have Web Serial disabled by default, controllable via the DefaultSerialGuardSetting policy. Mozilla is pursuing standardization through a new WHATWG Workstream proposal.
Mozilla has unveiled Project Nova, a broad design refresh coming to Firefox later in 2026, described internally as a renewal of existing matter rather than a replacement. The visual update introduces softer tab shapes with a subtle gradient indicating the active tab, more rounded and consistent UI components, refreshed icons for light and dark themes, rebalanced spacing, and a new color palette inspired by fire with deep smoky purples and warm glows. Firefox is restoring compact mode in response to user demand. Privacy controls are being pulled forward in the interface, with redesigned Settings offering plainer language and toggles to disable AI features entirely and adjust Enhanced Tracking Protection. On the performance side, Mozilla reports a 9% improvement in key page content load times over the past year. Productivity features such as tab groups, split view, and vertical tabs are made more accessible, and additional theme and wallpaper customization options are planned. The design system extends to mobile with shared colors, icons, and design tokens for greater cross-device consistency.
At Google I/O 2026, Demis Hassabis declared AGI is just a few years away and positioned Gemini Omni — a new any-input-to-any-output model combining video generation (VEO), image generation (Nano Banana), and interactive simulation (Genie) — as a key stepping stone, echoing OpenAI's earlier claim about Sora. Gemini 3.5 Flash was announced as a fast, competitively priced model that outperformed rivals on Finance Agent V2 and chart-reasoning benchmarks while trailing on vibe-coding tasks like Claude Opus 4.7 and GPT-5.5. Google and OpenAI are now aligned on SynthID watermark adoption and Pentagon AI contracts. The video frames a fundamental fork between OpenAI's bet that text-only reasoning will reach AGI via recursive self-improvement — highlighted by Andrej Karpathy joining Anthropic for pre-training research — and Google's world-model approach. A Google DeepMind researcher warns that jagged intelligence, where models ace hard math proofs but fail simple letter-counting, is a deep structural property that cannot be patched and will hinder scientific progress.
5 Supply Chain Attacks in 48 Hours: Why Securing One Layer Is Not Enough
Between May 18 and 19, 2026, five distinct supply chain attacks struck in 48 hours, hitting every layer of the development pipeline: a poisoned Nx Console VS Code extension with 2.2 million installs, compromised GitHub Actions (including actions-cool/issues-helper), a self-replicating npm worm (Mini Shai-Hulud), a trojanized Microsoft durabletask PyPI package, and culminating in GitHub disclosing that approximately 3,800 internal repositories were exfiltrated. Traditional SCA, SAST, and EDR tools failed to prevent these breaches because they do not monitor CI/CD runners at runtime or track IDE extensions on developer laptops. StepSecurity argues that defense requires layered controls across the full pipeline: runtime security via Harden Runner, developer machine visibility via Dev Machine Guard, automated Compromised Actions Policy, a Threat Center for real-time IOC distribution, a Secure Registry with cooldown enforcement, and GitHub Checks for PR analysis.
At Google I/O 2026, Demis Hassabis declared AGI is just a few years away and positioned Gemini Omni — a new any-input-to-any-output model combining video generation (VEO), image generation (Nano Banana), and interactive simulation (Genie) — as a key stepping stone, echoing OpenAI's earlier claim about Sora. Gemini 3.5 Flash was announced as a fast, competitively priced model that outperformed rivals on Finance Agent V2 and chart-reasoning benchmarks while trailing on vibe-coding tasks like Claude Opus 4.7 and GPT-5.5. Google and OpenAI are now aligned on SynthID watermark adoption and Pentagon AI contracts. The video frames a fundamental fork between OpenAI's bet that text-only reasoning will reach AGI via recursive self-improvement — highlighted by Andrej Karpathy joining Anthropic for pre-training research — and Google's world-model approach. A Google DeepMind researcher warns that jagged intelligence, where models ace hard math proofs but fail simple letter-counting, is a deep structural property that cannot be patched and will hinder scientific progress.
Mini Shai-Hulud Strikes Again: npm Worm Compromises Hundreds of @antv Packages
The Mini Shai-Hulud npm supply chain worm, tracked since April 2026, launched a major new wave on May 19, compromising hundreds of packages in Alibaba's widely used @antv data visualization suite — including @antv/g2, @antv/g6, @antv/l7, @antv/s2, and @antv/x6 — along with echarts-for-react (roughly 1.1 million weekly downloads) and timeago.js. The install-time payload, triggered via a preinstall hook running Bun, scrapes GitHub tokens, npm tokens, AWS credentials, Kubernetes service account files, SSH keys, and database connection strings, then exfiltrates them to t.m-kosche.com. New in this wave: the malware writes persistence artifacts to .vscode/tasks.json and .claude/settings.json, meaning removing the bad package version alone is insufficient for cleanup. Over 2,700 rogue GitHub repositories with Dune-themed names have been created using stolen tokens. Aikido recommends blocking packages by minimum publish age as the most effective prevention, since detection-based approaches cannot stop code that already ran during the install window.
The Wild West of VS Code Extensions and How a Poisoned Extension Breached GitHub
On May 18, 2026, version 18.95.0 of the Nx Console VS Code extension (2.2 million installs, verified publisher) was published to the Visual Studio Marketplace at 12:30 UTC via a stolen GitHub contributor token. Microsoft did not flag the upload; the maintainer received the notification email 6 minutes later, and the malicious build was unpublished at 12:47 UTC — an 18-minute window on the VS Code Marketplace and a 36-minute window on OpenVSX. Because VS Code auto-update fires within minutes of publication (not just on the 12-hour timer), any developer with the Extensions sidebar open or marketplace queries running was exposed. The same mechanism was used against AsyncAPI's extension in November 2025, where the malicious v1.0.1 persisted on user machines for nearly a month and generated 100–200 new compromised repositories per day. Once installed, marketplace takedowns cannot recall the extension; cleanup falls entirely on affected users. Aikido recommends a 48-hour minimum-age hold on extension installs as the most practical mitigation.
Google API Keys Keep Working After You Delete Them Long Enough to Be Exploited
Aikido Security discovered that deleting a Google API key does not revoke it immediately — across 10 trials, the maximum observed revocation window was nearly 23 minutes, the median was about 16 minutes, and the shortest was 8 minutes. During that window, an attacker holding a leaked key can continue sending authenticated requests to any enabled GCP API, including Gemini, BigQuery, and Maps. Regional inconsistency compounds the problem: in one trial, us-east1 VMs saw 82% of requests succeedone minute post-deletion while asia-southeast1 saw only 32%. By contrast, Service Account key revocations propagate in approximately 5 seconds and newer Gemini API keys (AQ. prefix) in about 1 minute. Google initially closed Aikido's report as won't fix, stating propagation delay is a known property of the system, but re-opened it as a P0 bug on May 22 after public disclosure. Until faster revocation ships, Aikido advises treating key deletion as a 30-minute operation and monitoring the GCP Traffic by Credential graph for unexpected usage during that window.
Web Serial API Now Supported in Firefox 151 for Desktop
Firefox 151 for Desktop adds support for the Web Serial API, enabling web applications to communicate directly with microcontrollers, development boards, 3D printers, USB power meters, and other serial-connected hardware without requiring native software. Compatible devices include Espressif ESP32 chips, Raspberry Pi Picos, LEGO devices, and any hardware that advertises a serial port over USB or Bluetooth. Mozilla collaborated with Adafruit to validate the implementation against real workflows such as installing CircuitPython firmware via the Web Serial-powered OPEN INSTALLER tool. Security is enforced via navigator.serial.requestPort(), which requires explicit per-site, per-port user permission; Firefox also adds add-on gating, borrowed from the Web MIDI API implementation, for a more detailed explanation before the port selection prompt. Firefox Enterprise deployments have Web Serial disabled by default, controllable via the DefaultSerialGuardSetting policy. Mozilla is pursuing standardization through a new WHATWG Workstream proposal.
Mozilla has unveiled Project Nova, a broad design refresh coming to Firefox later in 2026, described internally as a renewal of existing matter rather than a replacement. The visual update introduces softer tab shapes with a subtle gradient indicating the active tab, more rounded and consistent UI components, refreshed icons for light and dark themes, rebalanced spacing, and a new color palette inspired by fire with deep smoky purples and warm glows. Firefox is restoring compact mode in response to user demand. Privacy controls are being pulled forward in the interface, with redesigned Settings offering plainer language and toggles to disable AI features entirely and adjust Enhanced Tracking Protection. On the performance side, Mozilla reports a 9% improvement in key page content load times over the past year. Productivity features such as tab groups, split view, and vertical tabs are made more accessible, and additional theme and wallpaper customization options are planned. The design system extends to mobile with shared colors, icons, and design tokens for greater cross-device consistency.
The week of May 18-19, 2026 saw an unprecedented 48-hour supply chain attack wave that struck every layer of the development pipeline simultaneously. The Mini Shai-Hulud npm worm launched a major new wave, compromising hundreds of @antv packages (including @antv/g2, @antv/g6, @antv/l7, @antv/s2, @antv/x6), echarts-for-react (~1.1M weekly downloads), and timeago.js via a preinstall hook running Bun that exfiltrated GitHub tokens, AWS credentials, SSH keys, and Kubernetes service account files to t.m-kosche.com. Critically, this wave also writes persistence artifacts to .vscode/tasks.json and .claude/settings.json, meaning package removal alone is insufficient. Separately, the Nx Console VS Code extension (2.2M installs) had a malicious version 18.95.0 published via a stolen token for an 18-minute window, and GitHub disclosed that approximately 3,800 internal repositories were exfiltrated.
Google API key revocation was revealed to have a median 16-minute delay (maximum 23 minutes) — during which stolen keys remain fully functional against Gemini, BigQuery, and Maps. Aikido reported this to Google, which initially closed it as won't fix before reclassifying it as a P0 bug on May 22 after public disclosure. Service Account keys revoke in ~5 seconds for comparison.
On brighter news, Firefox 151 shipped the Web Serial API for desktop, enabling communication with ESP32 chips, Raspberry Pi Picos, and other serial hardware without native software — validated against Adafruit's OPEN INSTALLER workflow. Mozilla also revealed Project Nova, a broad Firefox design refresh introducing softer tab shapes, rounded UI, a fire-inspired color palette, restored compact mode, and prominent privacy controls. At Google I/O 2026, Demis Hassabis announced Gemini Omni (combining VEO, Nano Banana, and Genie) and declared AGI just a few years away.
Key Takeaways
The Mini Shai-Hulud npm worm's latest wave compromised @antv packages with ~1.1M weekly downloads and now writes persistence to .vscode/tasks.json and .claude/settings.json — removing the bad package version alone is not enough for cleanup.
Google API key deletion takes a median 16 minutes to propagate (max 23 minutes) — treat key rotation as a 30-minute operation and monitor GCP Traffic by Credential for unexpected usage during that window.
Firefox 151 ships the Web Serial API for desktop, completing cross-browser coverage alongside Chrome/Edge — web apps can now communicate with microcontrollers and development boards without native software.
