Forever Security says an AGENTS.md file dropped into a Downloads folder led a coding agent to try installing a malicious npm package, and that both Codex and Claude Code could be steered in tests.
TrendForce says optical fiber spot prices are 2.8 to five times 2025 levels as AI data center demand creates a 180 million fiber-kilometer shortfall that could last until at least 2028.
Version 0.5.144 of the tensorlake npm SDK shipped a Shai-Hulud worm variant that steals developer and cloud credentials and can wipe home directories if its stolen GitHub token is revoked.
