Today's digest
The big picture
AI developer tools are installed by thousands of engineers, making them high-value supply chain targets. A trusted publisher badge did not prevent this compromise.