A worm tore through npm by making the malware look perfectly legitimate
THE SO WHAT
ChainDrop shows how fragile the software supply chain is when a single registry compromise can poison hundreds of packages that everyone quietly depends on. Lock in provenance checks, pin versions, and treat your dependency tree as critical infrastructure — not a black box your build system blindly trusts.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechEric Adams Goes to Wisconsin to Pitch Data Centers, Gets Booed
Community pushback in Wisconsin is a reminder that data center expansion is now a political project, not just a zoning exercise. If your AI roadmap assumes cheap land and fast permits, start mapping local sentiment and incentive structures as hard constraints, not afterthoughts.
Deep & Emerging TechNew malware disguised as popular Roblox cheat tool could give hackers full control of your PC — including the webcam
A RAT and infostealer piggybacking on a Roblox cheat tool is another data point that consumer gaming ecosystems are now enterprise-adjacent threat vectors. If employees’ kids game on shared or unmanaged PCs, your security model needs to assume that home devices are compromised by default.
Deep & Emerging TechEvery Bank Needs A Stablecoin Strategy: Sheffield
If Visa is rolling out a stablecoin platform for issuance and movement, stablecoins are moving from crypto edge case to payments plumbing. Banks that don’t at least model fee, float, and compliance impacts of stablecoin rails this year are ceding design space to networks and fintechs.
Deep & Emerging TechAmsterdam startup Ore Energy raises $43 million to build iron-air batteries that store power for days
100-hour iron-air storage at grid scale is exactly the kind of buffer AI data centers need as they strain local grids. If you’re planning multi-MW AI deployments, start tracking long-duration storage vendors like Ore Energy as future partners or siting constraints, not science projects.