<p><strong>TLDR:</strong> The Bitwarden CLI npm package was compromised via a poisoned CI/CD dependency, deploying a self-propagating worm that harvested credentials and injected malicious instructions into AI coding assistants. TypeScript 7.0 beta dropped with a Go-based compiler rewrite delivering roughly 10x faster builds. GPT-5.5 launched with a 1M token context window and strong agentic benchmarks, while every major AI vendor announced enterprise agent platforms in the same week. The public CA clientAuth EKU sunset in May 2026 is a quiet time bomb for any distributed system using mTLS with public-CA-issued client certs.</p>
<hr>
<h2>Bitwarden CLI supply chain attack</h2>
<p>On April 22, attackers published <code>@bitwarden/cli@2026.4.0</code> to npm after compromising a GitHub Action through a poisoned Checkmarx KICS Docker image that Dependabot had automatically pulled. The package was live for roughly 90 minutes — long enough to do real damage across its ~78,000 weekly downloads. The malware harvested SSH keys, cloud credentials, npm tokens, GitHub tokens, and MCP server configs, then used stolen npm credentials to self-propagate into every package the victim had publish rights over. The most novel piece: it injected a 3,500-byte block into shell config files using heredoc syntax, invisible to normal shell execution but readable by AI coding assistants like Claude and Cursor. If you installed 2026.4.0, rotate everything — npm tokens, GitHub PATs, SSH keys, and any cloud credentials that were present on the machine. The attack is attributed to TeamPCP, the same group behind recent Trivy and Checkmarx KICS compromises.</p>
<h2>TypeScript 7.0 beta: Go rewrite ships</h2>
<p>The TypeScript compiler is now native Go, and the headline number is real: roughly 10x faster builds compared to TypeScript 6.0. Two new flags control the parallelism — <code>--checkers</code> for parallel type-checking workers and <code>--builders</code> for parallel project reference builds. The type-checking semantics are unchanged from 6.0, which is the right call. Breaking changes include removal of <code>target: es5</code>, <code>moduleResolution: node</code>, <code>baseUrl</code>, AMD/UMD/SystemJS, and strict mode now on by default. The programmatic API — what build tools and editors actually depend on — is planned for 7.1, so hold off on migrating tooling. Bloomberg, Vercel, and VoidZero are reportedly already running this in production.</p>
<h2>GPT-5.5 launches, Claude Advisor API cuts Opus costs</h2>
<p>OpenAI released GPT-5.5 on April 23 in two variants, with a 1M token context window and pricing at $5/$30 per 1M input/output tokens — matching Claude Opus 4.7 on input but $5 more on output. It leads on Terminal-Bench 2.0 at 82.7% but trails Claude Opus 4.7 on SWE-Bench Pro. The model is strongest at sustained agentic tasks across large codebases. Separately, Anthropic released a beta Claude Advisor API that pairs a cheaper executor model with Opus as an on-demand advisor in a single API call — Sonnet+Opus scores 74.8% on SWE-bench Multilingual at 11.9% less cost than Opus solo, and Haiku+Opus more than doubles Haiku’s BrowseComp score at 85% less cost than Sonnet.</p>
<h2>Public CA clientAuth EKU sunset: May 2026</h2>
<p>Starting May 2026, Let’s Encrypt, DigiCert, Sectigo, and GlobalSign will stop including the Client Authentication EKU in publicly issued TLS certificates. This breaks mTLS anywhere you’re using public-CA-issued client certificates — which includes Apache Kafka, Cassandra, ZooKeeper, Pulsar, Ignite, and Geode. The failure mode is silent: nothing breaks immediately, but certificate renewals will start producing certs that fail client auth checks. Three migration paths exist: internal/enterprise CA for all certs, hybrid model with private CA for clients only, or dropping to server-only TLS with application-layer auth. Audit your environments now with OpenSSL or keytool before this catches you mid-renewal.</p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>WireGuard for Windows 1.0:</strong> Reached stable after fixing a long-standing NDIS pointer hack and reverse-engineering the NSI driver to get instant MTU change notifications instead of polling — a Windows bug Microsoft acknowledged in 2021 but never fixed.</li>
<li><strong>AWS Lambda S3 Files:</strong> Lambda functions can now mount S3 buckets as file systems using standard file operations, built on EFS, with multiple functions mounting the same bucket simultaneously — no custom sync logic needed.</li>
<li><strong>Kubernetes 1.36:</strong> Mutating Admission Policies and User Namespaces both graduate to stable; Dynamic Resource Allocation gains prioritized fallback scheduling via a new <code>firstAvailable</code> field in ResourceClaims.</li>
<li><strong>Google prompt injection scan:</strong> Google’s Threat Intelligence team scanned Common Crawl and found indirect prompt injection attacks in the wild, with malicious detections up 32% between November 2025 and February 2026 — currently low sophistication, but the trend line is clear.</li>
<li><strong>Kyber ransomware:</strong> First confirmed ransomware using post-quantum cryptography (ML-KEM1024 protecting an AES-256 key). No practical security benefit yet — experts read it as marketing.</li>
<li><strong>DigitalOcean Project Poseidon:</strong> Internal ML system predicting hypervisor failures before they occur, using a two-stage pipeline that eliminates ~98% of nodes at Stage 1 and calculates crash probability scores for the rest. Running edge-first across 14 data centers.</li>
<li><strong>Firefox/TOR fingerprinting fix:</strong> Mozilla patched a privacy vulnerability in Firefox 150 where deterministic database metadata retrieval order enabled fingerprinting that bypassed private browsing and TOR protections.</li>
<li><strong>Cloudsmith Series C:</strong> Belfast-based artifact management platform raised $72M led by TCV, positioning against JFrog and Sonatype on the thesis that AI-generated code volumes will outpace what those tools were designed for.</li>
<li><strong>OpenTelemetry deprecates OpenTracing compatibility:</strong> New SDKs are no longer required to implement OpenTracing shims; earliest removal from the spec is March 2027.</li>
<li><strong>Ubuntu 26.04 LTS ships:</strong> Linux 7.0, GNOME 50, Wayland-only (X11 gone), .NET 10 as default, post-quantum crypto via OpenSSH 10.2, sudo-rs and rust-coreutils, AMD ROCm and NVIDIA CUDA available via apt.</li>
<li><strong>UK NCSC endorses passkeys as default:</strong> First time the agency has advised moving away from passwords entirely, citing FIDO2 passkeys as resistant to phishing, credential reuse, and relay attacks.</li>
<li><strong>Microsoft Secure Boot cert expiry:</strong> Original 2011 UEFI Secure Boot certificates expire June 24, 2026 — enterprise environments with staged patching and Windows 10 machines outside ESU are the main risk.</li>
<li><strong>GopherWhisper APT:</strong> Previously unknown Chinese state-backed group targeting Mongolian government using Go-based malware that routes C2 through Slack, Discord, Microsoft Graph API, and <a href="http://file.io" target="_blank" rel="noopener nofollow">file.io</a> to blend into normal traffic.</li>
<li><strong>ClickHouse vs Elasticsearch benchmark:</strong> ClickHouse is 2-6x faster on cold log queries and stores the same data in roughly one-fifth the space; 50B row ingestion took under 4 hours vs ~5 days for Elasticsearch.</li>
<li><strong>Disaggregated LLM inference:</strong> Splitting prefill and decode into dedicated GPU pools roughly doubled compute efficiency on a 48-GPU H100 cluster with no new hardware — decode pool improved from 30% to 70%+ bandwidth utilization.</li>
</ul>


Server-side development, system design, API patterns, and distributed architecture.

Backend Digest

A curated roundup of major developer security and tooling news. The Bitwarden CLI npm package was compromised via a poisoned CI/CD dependency chain, deploying a self-propagating worm that harvested credentials and injected malicious instructions into AI coding assistants like Claude and Cursor — rotate all credentials if you installed version 2026.4.0. TypeScript 7.0 beta ships a Go-based compiler rewrite delivering ~10x faster builds, with new parallelism flags but the programmatic API deferred to 7.1. GPT-5.5 launched with a 1M token context window optimized for agentic tasks, while Anthropic's Claude Advisor API enables cost-efficient Opus pairing. A quiet but critical deadline: public CAs will stop issuing clientAuth EKU certs in May 2026, silently breaking mTLS in systems using Kafka, Cassandra, and similar. Also covered: WireGuard for Windows 1.0, Kubernetes 1.36, Ubuntu 26.04 LTS, ClickHouse vs Elasticsearch benchmarks, post-quantum Kyber ransomware, and more.

Bitwarden CLI supply chain attack, TypeScript 7.0 goes native with a Go rewrite