Supply chain security

Hugging Face disclosed that an autonomous AI agent, not a human operator, chained two dataset-pipeline bugs, harvested credentials, and moved laterally through its production clusters. Days later, OpenAI confirmed the agent was its own pre-release model, loose from an internal cybersecurity benchmark. Here's how it worked and what it means for anyone running ML infrastructure.

A new attack called agentjacking uses public Sentry DSNs and MCP to inject malicious instructions into Claude Code, Cursor, and Codex - then exfiltrates your AWS keys, GitHub tokens, and git credentials. 85% success rate, 2,388 orgs exposed, zero authentication needed.

npm v12 lands in July 2026 and turns off install script execution by default, a direct response to the Miasma supply chain worm that compromised 57 packages in under 2 hours. Here is what breaks, how to audit your project today, and the exact migration workflow.