Governing Security in the Age of Infinite Signal – From Discovery to Control

Snyk published multiple posts in early Apr 2026 covering AI security and a high-risk npm supply‑chain incident. The standout alert: the Axios npm package was compromised via a maintainer account, with malicious versions 1.14.1 and 0.30.4 adding a hidden dependency that deploys a cross‑platform remote access trojan (RAT). Snyk provides guidance on who’s affected and how to check exposure. Other posts cover AI governance, container registry sync for runtime intelligence, the LiteLLM compromise and the need to map AI blast radius, and lessons from Snyk’s Evo design partner program.