Governing Security in the Age of Infinite Signal – From Discovery to Control

Snyk published multiple posts covering high-risk supply-chain and AI security issues. The most urgent item: malicious versions of the Axios npm package (1.14.1 and 0.30.4) were published using a compromised maintainer account, introducing a hidden dependency that installs a cross-platform remote access trojan (RAT) — affecting projects that depend on those versions. Other posts discuss AI-specific risks (LiteLLM compromise and AI “blast radius”), governance and control for AI discovery, Snyk Evo design lessons, and a Container Registry Sync GA for automated image management and runtime intel.