Draft: Supply chain attacks hit 847 open source projects this week

Draft ready

Supply chain attacks hit 847 open source projects this week

Download

Generated May 25, 2026 at 21:04

Pick a subject line

Three angles — choose the one that fits your audience

Data-driven

Supply chain attacks hit 847 open source projects this week

Curiosity

Can AI agents actually run real science experiments

Editorial

Google's agentic Gemini is the real competition now

Review the newsletter below, then hit Copy HTML in the top right and paste into your platform's HTML editor.

Newsletter preview

Where to paste your HTML

Beehiiv

New Post → HTML tab → Paste

Substack

New post → ··· menu → HTML editor → Paste

Kit / ConvertKit

New Broadcast → HTML editor → Paste

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
  <title>AI & Tech Dispatch</title>
  <style>
    body { font-family: Georgia, 'Times New Roman', serif; max-width: 640px; margin: 40px auto; background: #ffffff; color: #1a1a1a; line-height: 1.7; }
    h1 { font-size: 28px; font-weight: 700; margin-bottom: 4px; }
    .issue-date { color: #666; font-size: 14px; margin-bottom: 32px; }
    .intro { font-size: 16px; margin-bottom: 40px; padding-bottom: 24px; border-bottom: 2px solid #e5e5e5; }
    .article { margin-bottom: 32px; padding-bottom: 28px; border-bottom: 1px solid #f0f0f0; }
    .article:last-child { border-bottom: none; }
    .article-meta { font-size: 12px; color: #888; text-transform: uppercase; letter-spacing: 0.05em; margin-bottom: 6px; }
    .article h2 { font-size: 19px; margin: 0 0 10px 0; }
    .article h2 a { color: #1a1a1a; text-decoration: none; }
    .article h2 a:hover { text-decoration: underline; }
    .article p { font-size: 15px; margin: 0; color: #333; }
    .synthesis { border-left: 3px solid #6bab8a; padding-left: 16px; }
    .synthesis-badge { background: #e8f4ee; color: #1a3a2a; font-size: 10px; padding: 2px 7px; border-radius: 3px; font-weight: 700; letter-spacing: 0.06em; text-transform: uppercase; margin-left: 8px; vertical-align: middle; }
    .footer { margin-top: 48px; padding-top: 24px; border-top: 1px solid #e5e5e5; font-size: 13px; color: #888; }
    .through-line { background: #f0f7f3; border-left: 3px solid #6bab8a; padding: 12px 16px; margin-bottom: 32px; border-radius: 0 4px 4px 0; }
    .through-line-label { font-size: 10px; font-weight: 700; text-transform: uppercase; letter-spacing: 0.08em; color: #6bab8a; margin-bottom: 4px; }
    .through-line-text { font-size: 14px; color: #333; font-style: italic; margin: 0; }
    .section-header { font-size: 11px; font-weight: 700; text-transform: uppercase; letter-spacing: 0.1em; color: #888; margin: 40px 0 16px 0; padding-bottom: 8px; border-bottom: 1px solid #e5e5e5; }
    .watch-list { padding-left: 20px; margin: 0 0 32px 0; }
    .watch-list li { font-size: 14px; color: #333; margin-bottom: 10px; line-height: 1.5; }
    .article.hero { background: #f9fcfa; border-radius: 8px; padding: 20px; margin-bottom: 32px; border-bottom: none; }
    .article.hero h2 { font-size: 22px; }
    .article.hero p { font-size: 16px; }
    .key-stat { font-size: 21px; font-weight: 700; color: #1a3a2a; line-height: 1.2; margin: 10px 0 10px; }
  </style>
</head>
<body>
  <h1>AI & Tech Dispatch</h1>
  <div class="issue-date">Issue #5 · May 25, 2026</div>

<div class="intro">The same week Google declared its agentic future at I/O 2026, the security world was quietly having a meltdown — TeamPCP's supply chain rampage hit roughly 3,800 GitHub repositories and, somehow, CISA managed to make it worse. Meanwhile, AI benchmarks are getting harder to ignore as models start showing genuine research-level chops, and the attack surface for LLMs has shifted somewhere defenders aren't fully ready for. Five stories, zero fluff, one surprisingly delightful Datasette drop buried at the end.</div>

<div class="through-line">
    <div class="through-line-label">This week&#39;s theme</div>
    <p class="through-line-text">AI capabilities are accelerating faster than the security frameworks designed to keep them safe</p>
  </div>

<div class="article hero synthesis">
    <div class="article-meta">
      Ars Technica<span class="synthesis-badge">Synthesis</span>
    </div>
    <h2><a href="https://arstechnica.com/information-technology/2026/05/a-hacker-group-is-poisoning-open-source-code-at-an-unprecedented-scale/" target="_blank">Supply chain attacks and open source code poisoning</a></h2>
    <div class="key-stat">20 distinct attack waves across 500+ packages</div>
    <p><strong>TeamPCP's Supply Chain Rampage—and CISA's Self-Inflicted Wound</strong> The same week GitHub confirmed that TeamPCP compromised approximately 3,800 of its internal code repositories—achieved by poisoning a VSCode extension installed by a single GitHub developer—Socket's research places the group's broader campaign at 20 distinct attack waves across 500+ unique packages in just a few months, making this the longest-running software supply chain spree on record. TeamPCP is now openly hawking GitHub's source code and internal org data on BreachForums, though GitHub maintains the exposure is limited to its own infrastructure and not customer repositories. Meanwhile, a separate but thematically resonant story broke via Brian Krebs: a public GitHub repo named "Private-CISA," traced to CISA contractor Nightwing, exposed plaintext passwords, SSH private keys, and tokens since at least November 2025—with Seralys founder Philippe Caturegli independently verifying that the credentials granted high-privilege access to multiple AWS GovCloud accounts.</p>
  </div>
  
  
  
  <div class="article synthesis">
    <div class="article-meta">
      Google AI Blog · MIT Technology Review<span class="synthesis-badge">Synthesis</span>
    </div>
    <h2><a href="https://blog.google/innovation-and-ai/sundar-pichai-io-2026/" target="_blank">Google I/O 2026 and Gemini announcements</a></h2>
    <div class="key-stat">4x faster than competing frontier models</div>
    <p><strong>Google I/O 2026: Gemini Goes Agentic, and the Stakes Are Larger Than the Benchmarks Suggest</strong> Every source agrees on the headline: Google is making a hard pivot to agentic AI, with Gemini 3.5 Flash as the flagship proof point—outperforming Gemini 3.1 Pro on Terminal-Bench 2.1 (76.2%), GDPval-AA (1656 Elo), and MCP Atlas (83.6%), while running 4x faster than competing frontier models at less than half the cost. The scale numbers Sundar Pichai dropped are genuinely staggering—token processing has jumped 7x year-over-year to 3.2 quadrillion per month, 8.5 million developers building monthly, and AI Mode already clearing 1 billion MAUs in under a year—and they align across sources as evidence of real adoption, not just hype.</p>
  </div>
  
  
  
  <div class="article synthesis">
    <div class="article-meta">
      The Verge - AI · Wired<span class="synthesis-badge">Synthesis</span>
    </div>
    <h2><a href="https://www.theverge.com/column/935545/hackers-ai-chatbots" target="_blank">ChatGPT and LLM security vulnerabilities</a></h2>
    
    <p><strong>The Attack Surface Has Moved Inward—And the Economics of Defense Are Breaking Down</strong> What these two pieces together reveal is a security landscape undergoing a structural, not incremental, shift: early LLM exploits like "DAN" (Do Anything Now) and the "grandma napalm" jailbreak were embarrassingly crude social-engineering tricks that companies patched reactively, but the underlying vulnerability—that chatbots are architected to engage, making hard guardrails architecturally self-defeating—was never actually closed. The Verge frames this as a personality-exploitation problem rooted in LLM conversational design; Wired reframes the same threat surface as an economic and temporal arms race, where independent researcher Joseph Thacker reports submitting <strong>three times more bugs</strong> than a year ago and estimates Google alone could face <strong>2–10x higher bug bounty payouts</strong> year-over-year.</p>
  </div>
  
  
  
  <div class="article synthesis">
    <div class="article-meta">
      arXiv cs.AI<span class="synthesis-badge">Synthesis</span>
    </div>
    <h2><a href="https://arxiv.org/abs/2605.22875" target="_blank">AI-driven scientific research tools and systems</a></h2>
    <div class="key-stat">AI solved research-level mathematical problems</div>
    <p><strong>AI Is Coming for Research-Level Science — and It's Starting to Work</strong> Two papers dropped on the same day (May 20, 2026) that, taken together, signal a meaningful inflection point in AI-assisted scientific research. The Research Math Agents (RMA) system tackles what prior work consistently sidestepped — not competition math or formal theorem proving, but genuine research-level mathematical problems requiring long-horizon reasoning, literature grounding, and iterative proof refinement — and it solved 8 out of 10 problems on the First Proof benchmark, outperforming both GPT-5.2R and Aletheia, with expert evaluators judging its proofs as more logically sound and readable. Meanwhile, SciAtlas addresses the upstream knowledge problem: 43M papers, 26 disciplines, 157M entities, and 3B triplets organized into a heterogeneous knowledge graph with a neuro-symbolic tri-path retrieval algorithm designed to replace shallow keyword or vector search with genuine topological reasoning.</p>
  </div>
  
  
  
  <div class="article">
    <div class="article-meta">
      Simon Willison's Blog
    </div>
    <h2><a href="https://simonwillison.net/2026/May/21/datasette-agent/#atom-everything" target="_blank">Standalone: Datasette Agent announcement</a></h2>
    <div class="key-stat">three-year-old LLM Python library</div>
    <p>Simon Willison shipped Datasette Agent on May 21, 2026, merging his three-year-old LLM Python library with Datasette into a conversational query interface that translates natural language into SQLite SQL and returns results — plus charts via the datasette-agent-charts plugin powered by Observable Plot. The live demo at agent.datasette.io runs on Gemini 3.1 Flash-Lite for cost and speed, and the plugin architecture already has three extensions shipped at launch, including ChatGPT Images 2.0 integration and a Fly Sprites code execution sandbox. Local model support is first-class: a single `uvx` one-liner can point the agent at LM Studio running gemma-4-26b-a4b, and Willison notes that open-weight models from the past six months are increasingly reliable at tool calls and SQLite query generation.</p>
  </div>
  
  
  
  <div class="article">
    <div class="article-meta">
      MIT Technology Review
    </div>
    <h2><a href="https://www.technologyreview.com/2026/05/22/1137845/the-download-coding-future-steroid-olympics-ai-science/" target="_blank">Standalone: The Download newsletter digest</a></h2>
    <div class="key-stat">Nearly half shipped unreviewed Claude-written code</div>
    <p>At Anthropic's Code with Claude developer event in London, nearly half the attendees admitted to shipping Claude-written code they hadn't reviewed — a candid data point that signals how fast "AI-assisted" is becoming "AI-authored." Separately, Google DeepMind CEO Demis Hassabis used Google I/O to announce Gemini for Science, an agent-driven system that can orchestrate specialized models like WeatherNext rather than replace them outright — a meaningful architectural pivot from purpose-built scientific AI toward general-purpose agentic pipelines. Both moves point in the same direction: the human is increasingly a reviewer (or not even that) rather than a builder. For developers, the near-term risk isn't job loss but liability — unreviewed code in production is a security and correctness debt that compounds fast. Watch whether Anthropic publishes any safety or code-quality benchmarks for Claude Code's autonomous output; right now, "almost half the room" is a vibe, not a validation.</p>
  </div>
  
  
  
  <div class="article">
    <div class="article-meta">
      The Verge - AI
    </div>
    <h2><a href="https://www.theverge.com/tech/936176/google-ai-overviews-search-disregard" target="_blank">Standalone: Google AI Overviews search quality issues</a></h2>
    <div class="key-stat">Model interpreted single words as instruction tokens</div>
    <p>Google's AI Overviews briefly treated single-word queries like "disregard," "ignore," and "skip" as conversational resets rather than search terms, returning chatbot-style responses such as "Got it. If you need anything else, just let me know!" — a clear sign the underlying model was interpreting these words as instruction tokens rather than dictionary lookup targets. Google confirmed to Android Authority that the system was "misinterpreting some action-related queries" and pledged a fix, though as of Friday afternoon "ignore" and "skip" were still producing broken outputs. The failure is a textbook prompt-injection edge case: words that function as system-level directives in instruction-tuned LLMs are colliding with a retrieval UI that was never designed to handle that ambiguity.</p>
  </div>
  
  
  
  <div class="article">
    <div class="article-meta">
      VentureBeat - AI
    </div>
    <h2><a href="https://venturebeat.com/technology/google-just-redesigned-the-search-box-for-the-first-time-in-25-years-heres-why-it-matters-more-than-you-think" target="_blank">Standalone: Google search box redesign</a></h2>
    <div class="key-stat">25-year-old keyword search paradigm retired</div>
    <p>Google retired the 25-year-old keyword search paradigm at I/O 2026, replacing the static text box with a multimodal input layer that accepts text, images, PDFs, videos, and live Chrome tab context simultaneously. The company also collapsed AI Overviews and AI Mode into a single unified search flow, eliminating the toggle friction that had kept the two experiences siloed. This isn't a UI refresh — it's Google repositioning the search box itself as a context aggregator, a direct architectural response to ChatGPT and Perplexity eating into query volume for informational and research tasks. For developers and founders building SEO-dependent products or search-adjacent tooling, the unified AI flow means the traditional blue-link result is no longer the default destination — it's a fallback.</p>
  </div>

</body>
</html>