Digest #224: AsyncAPI npm packages hijacked in 8 minutes, 222 fake GitHub repos, an Azure tenant lost in an hour and the death of small PRs

Also inside: HashiCorp's HCL-native policy engine for Terraform, a $19-a-month hosting bill cut to zero, and a Kubernetes rewritten from scratch in Rust that passes 94% of conformance tests.

An attacker opened 37 pull requests against AsyncAPI last week, and eight minutes after the malicious one landed, the CI secrets were gone and four npm packages with 3 million weekly downloads were shipping a three-stage payload. The same week, Socket mapped a network of 222 fake GitHub repos pushing a Go module that was really a Windows malware loader, and Sysdig walked through an Azure tenant that fell in about an hour because permissions live across five systems that don’t talk to each other. The most interesting read, though, might be Rootly explaining why they killed their two-year-old small-PR rule now that 80% of their PRs are written by agents.

If you have feedback to share or are interested in sponsoring this newsletter, feel free to reach out via LinkedIn or simply reply to this email.

Newsworthy stories

• AsyncAPI supply chain compromise via GitHub Actions

• Malicious Go module exposes GitHub malware lure network spanning 222 repositories

• Anatomy of an Azure permission takeover

• Introducing a policy workflow built for Terraform

• Why we got rid of our small-PR rule

• How I migrated my website to Cloudflare and saved $228

• The first year managing an SRE team

Tutorials of the week

• The startup’s Postgres survival guide

• Hunting malware and malicious MCPs in memory on Kubernetes

• How I built my own home-lab: a single-node Kubernetes platform

• Authenticate legitimate AI agent traffic with AWS WAF Bot Control

• FinOps guardrails at provisioning time

• 6 security settings every GitHub maintainer should enable this week

• Multi-cluster databases on Kubernetes: architecture and deployment

• How to back up PostgreSQL in Docker

• From Terraform spaghetti to a production-grade GitOps platform

• To every agent its own database

Videos of the week

Projects of the week

• Cleat gives AI coding agents a per-project Docker sandbox so they can run fully autonomously without touching your host.

• Rusternetes is a ground-up reimplementation of Kubernetes in Rust that already passes 94% of the official conformance suite.

• Destructive Command Guard intercepts destructive shell commands before an AI agent gets to run them.

• OpenGeni is a self-hostable agent runtime with durable sessions, human approvals, and governed credentials.

• frp exposes a local server sitting behind NAT or a firewall to the internet.

• Plannotator is a local browser UI for marking up an agent’s plans and diffs, then sending the feedback straight back to it.

• git-filter-repo rewrites Git history to extract subdirectories, rename paths, or strip secrets.

Meme of the week

I advise infra, devtools, and AI startups on AI product strategy, cloud security/FinOps, and tech M&A. If that's you, just reply to this email.