Governing Security in the Age of Infinite Signal – From Discovery to Control

Snyk published multiple posts on AI security and governance (from discovery-to-control, container registry sync GA, LiteLLM blast-radius, and Evo design-partner lessons) and disclosed a high-impact supply‑chain compromise: malicious Axios npm versions 1.14.1 and 0.30.4 were published from a compromised maintainer account, adding a hidden dependency that deploys a cross‑platform remote access trojan. Impacted users should audit dependency trees, identify and replace/remove the affected Axios versions, rotate credentials and tokens, scan for indicators of compromise, and apply supply‑chain mitig