<p><strong>TLDR:</strong> Two major supply chain attacks dominated the day. The Laravel-Lang GitHub org was compromised, with all tags across three Composer packages rewritten to inject a credential-stealing PHP payload. Separately, a campaign called Megalodon poisoned over 5,500 public GitHub repositories in a six-hour window by backdooring CI workflow files. npm also shipped staged publishing and install-source restrictions in CLI 11.15.0, which feels well-timed. If you run PHP projects or have loose branch protection rules anywhere, today is a good day to audit both.</p>
<hr>
<h2>Laravel-Lang Composer packages fully compromised</h2>
<p>Sometime on May 22, an attacker with org-wide push access to the Laravel-Lang GitHub organization rewrote every git tag across three packages — <code>laravel-lang/http-statuses</code>, <code>laravel-lang/actions</code>, and <code>laravel-lang/attributes</code> — in a 15-minute window. The injected <code>helpers.php</code> file hooks into Composer’s <code>autoload.files</code>, so the payload runs automatically on any application startup. It contacts a typosquatted C2 domain, drops a PHP loader and ELF binary into <code>/tmp</code>, exfiltrates CI secrets (AWS, GCP, Azure keys, SSH keys, browser passwords, crypto wallets), then self-deletes from disk while continuing to run in memory. Packagist has pulled the affected versions, but the only safe recovery path is pinning a pre-attack commit SHA and rotating every secret that was accessible during any affected install.</p>
<h2>Megalodon: 5,561 repos backdoored via GitHub Actions in six hours</h2>
<p>On May 18, attackers exploited weak branch protection rules to inject malicious GitHub Actions workflow files disguised as routine CI optimizations across 5,561 public repositories. The backdoored workflows harvested cloud credentials, SSH keys, API tokens, OIDC tokens, and Kubernetes configs, then exfiltrated everything via HTTPS POST. The technique is classified as direct Poisoned Pipeline Execution (d-PPE), mapped to MITRE ATT&amp;CK T1195.002. Notable victims include Tiledesk, whose npm package was poisoned across multiple versions. If your repos have permissive branch protection or accept workflow changes from forks without review, assume you’re in scope.</p>
<h2>npm 11.15.0 ships staged publishing and install-source controls</h2>
<p>The timing is almost too convenient. npm CLI 11.15.0 adds two supply-chain controls that would have meaningfully raised the bar against attacks like the ones above. Staged publishing is now GA: packages go into a queue requiring explicit 2FA-backed maintainer approval before becoming installable, even for CI/CD and OIDC trusted publishing flows. Three new install-source flags — <code>--allow-file</code>, <code>--allow-remote</code>, and <code>--allow-directory</code> — let teams block npm from resolving dependencies from non-registry sources. The <code>--allow-git</code> default will flip to <code>none</code> in npm v12. Worth setting these in <code>.npmrc</code> now rather than waiting.</p>
<h2>Pulumi ships <code>pulumi do</code> for ad-hoc cloud resource operations</h2>
<p>Pulumi’s new <code>pulumi do</code> CLI command lets you run direct CRUD operations against any cloud resource — AWS, GCP, Azure, Kubernetes, Cloudflare, and more — without a full IaC project, code file, or state file. It uses the same provider schema as standard Pulumi programs, so the interface is consistent whether a human or an AI agent is driving it. Currently shipping as a research preview in v3.242.0 and stateless for now, with stateful mode and Pulumi ESC credential integration on the roadmap. Useful for quick ad-hoc fixes without the overhead of standing up a full stack.</p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Andrej Karpathy joins Anthropic</strong> for frontier LLM R&amp;D, per Dev Weekly #112 — no further details on scope or timeline.</li>
<li><strong>turbopuffer crosses $100M ARR</strong> with under $1M in venture capital raised; Cursor credits it with cutting their database bill by 95% by building on object storage with NVMe SSD caching.</li>
<li><strong>DigitalOcean App Platform</strong> adds request-based autoscaling (GA) that scales on live RPS and P95 latency rather than CPU, using a 5-minute rate window to avoid reacting to momentary spikes.</li>
<li><strong>Deno 2.8</strong> is a substantial release: 3.66x faster cold npm installs, Node.js API compatibility up from 42% to 76.4%, <code>import defer</code> support, six new subcommands including <code>deno audit fix</code> and <code>deno ci</code>, and framework-aware <code>deno compile</code> for Next.js, Astro, SvelteKit, and others.</li>
<li><strong>GitHub breach via NX Console VS Code extension</strong> — a GitHub employee had the malicious extension installed with auto-update enabled, leading to exfiltration of roughly 3,800 internal repositories.</li>
<li><strong>JFrog 2026 supply chain report</strong> found malicious npm packages surged 451% in 2025, producing over 2 million compromised downloads; 495 malicious AI models were found on public registries including Hugging Face.</li>
<li><strong>Discord’s Scylla Control Plane</strong> automates rolling upgrades, cluster expansion, and shadow cluster provisioning across hundreds of ScyllaDB nodes using YAML-defined declarative workflows with SQLite-backed resumable state.</li>
<li><strong>Uber Eats</strong> replaced batch feature pipelines with real-time signal processing (latency down from 24 hours to seconds) and shifted from pointwise to listwise ranking using transformer-based sequence modeling.</li>
<li><strong>Cloudflare rebuilt Browser Run</strong> on its own Containers platform, achieving 4x higher concurrency (120 simultaneous browsers vs. 30) and 50% faster response times, driven by AI agent demand outpacing shared infrastructure capacity.</li>
<li><strong>pg_mentat 1.3.0</strong> brings Datomic-compatible Datalog, immutable datoms, time travel, and GDPR excision inside PostgreSQL 13–18 via a Rust extension, with soft integrations for pgvector, PostGIS, and others.</li>
<li><strong>Symfony 8.1 Messenger</strong> adds batch message fetching, non-blocking PostgreSQL LISTEN/NOTIFY for multi-queue priority consumption, per-message AMQP priority, and configurable service reset intervals.</li>
<li><strong>AI coding assistant data from 250K+ developers</strong> shows 48–58% Time-to-PR improvements but AI-generated PRs wait 4–6x longer for review and introduce 15–18% more security vulnerabilities — the review bottleneck is real.</li>
<li><strong>ROADtools</strong> (open-source Azure/Entra ID red-team framework) is being actively used by APT29 and APT33 to exploit device code flow and Primary Refresh Tokens to bypass MFA and conditional access policies.</li>
</ul>


Server-side development, system design, API patterns, and distributed architecture.

Backend Digest

Two major supply chain attacks are covered: the Laravel-Lang GitHub org was compromised with all tags across three Composer packages rewritten to inject a credential-stealing PHP payload that exfiltrates AWS, GCP, Azure keys, SSH keys, and crypto wallets. Separately, the Megalodon campaign backdoored 5,561 public GitHub repositories in six hours by injecting malicious GitHub Actions workflow files via weak branch protection rules, harvesting cloud credentials and OIDC tokens. npm CLI 11.15.0 ships timely supply-chain defenses including staged publishing with 2FA-backed approval and install-source restriction flags. Additional notable items include Deno 2.8's major performance improvements, a GitHub breach via a malicious VS Code extension, JFrog's 2026 supply chain report showing 451% surge in malicious npm packages, and data showing AI-generated PRs introduce 15–18% more security vulnerabilities.

Laravel-Lang supply chain attack hits 233 versions, Megalodon poisons 5,500 GitHub repos