AINewsnow

Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed

This story is from 2026-10-18. It is preserved in the archive; the latest stories are on the live feed.

Over 1,500 npm packages were compromised in a supply-chain attack last week, according to Help Net Security. One infected dependency is enough to execute arbitrary code. AI coding agents and automated pipelines pull these packages as trusted dependencies during normal operation. When an agent insta…

Read the full story at r/deeplearning ↗

Timeline · 1 report

  1. 2026-10-18 21:37 · r/deeplearning
    Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed

More stories

  1. DeepSeek V4.1 Flash 1017 now available on AI Gateway — Vercel Blog
  2. Anthropic commits billions to a 'public benefit fund' — Business Insider AI
  3. Intel unveils its GPU D-series for data centers, featuring up to 480GB of LPDDR5X memory, an unusually large capacity to support demanding inference workloads — Techmeme
  4. Sam Altman's World launches a World ID verification suite for banks, bundling tools to verify human and agent identities, its first industry-specific offering — Techmeme
  5. Anthropic proposes AI safety bill with high-risk thresholds and federal preemption — Politico Technology
  6. AI Gateway logs now show session affinity — Vercel Blog
  7. Consumer apprehension grows as US retailers adopt AI-assisted pricing tools — ABC News Technology
  8. Anthropic gives third-party auditors ’employee-like access’ in AI industry first — ZDNET AI

Get the daily brief of stories like this at 6:30 every morning →