News
Bad Actor Drops 36 Malicious Packages in npm, Targets Guardarian Users
Jeff Burt | | credentials, cryptocurrency, docker containers, Guardarian, kubernetes, Lazarus Group, npm malware, Python, Redis, SafeDep, Secrets, Shai-Hulud, software supply chain attacks, sonatype, StrapiThe npm code repository is again being used by a bad actor to launch a supply chain attack that includes three dozen malicious packages that appear as Strapi CMS plugins but deliver ...
Five Great DevOps Job Opportunities
Mike Vizard | | Agentic AI Engineering, Capital Markets DevOps, Cloud Engineer Salaries, DevOps Jobs 2026, DevOps Manager Hiring, Remote DevOps Careers, Senior DevOps Engineer Roles, Tech Salary Trends 2026Explore this week’s top DevOps and Platform Engineering roles. From $300k Cloud Engineering in Maryland to cutting-edge Agentic AI positions at T-Mobile ...
Survey Surfaces Increased Reliance on Open Source Software to Build Apps
Mike Vizard | | AI-Driven Vulnerabilities, Cyber Resilience Act (CRA), DevOps maintenance, DevSecOps best practices, DORA Compliance, Enterprise Open Source Adoption., Open Source Software (OSS), OpenLogic Survey, Software Supply Chain Security, vendor lock-inOpen source adoption is surging, with 49% of IT teams increasing usage. However, 47% of staff spend 75% of their time on maintenance. Explore the impact of AI threats and EU regulations ...
Developers Using Anthropic Claude Code Hit by Token Drain Crisis
Adrian Bridgwater | | ai, AI coding assistant, Anthropic, automation, Claude Code, CLI Coding, cloud, Developer Velocity, developers, devops, Max Subscription, Prompt Caching, Quota Exhaustion, Token Tracking Bug, Usage LimitsAnthropic’s Claude Code users report Max tier quotas exhausting in under 20 minutes. Explore the "Cache-22" of prompt caching, session limits, and why AI coding "opacity" is stalling developer workflows ...
North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
Jeff Burt | | Axios, CI/CD, Google Threat Intelligence Group, JavaScript dependencies, Mandiant, North Korea, remote access trojan (RAT), Socket, sonatype, supply chain attack, TeamPCPThe threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large "blast radius." ...
Harness Extends CD Platform to Address AI Coding Challenges
Mike Vizard | | AI coding tools, AI-Powered Verification, Automated Rollback, continuous delivery, database devops, DevOps Scale, Harness CD, platform engineering, Release Orchestration, Snowflake Support, software engineering productivity, Warehouse-Native Feature ManagementHarness expands its CD platform to tackle the "AI code explosion" with automated rollbacks, snowflake support, and warehouse-native feature management ...
OpenTelemetry Gets Kotlin Multiplatform API & SDK
Adrian Bridgwater | | Android Development, application development, automation, Client-side Monitoring, cloud-native, CNCF, continuous delivery, cross-platform development, devops, Embrace, JVM Interoperability, KubeCon 2026, Logging API, mobile observability, observability, Telemetry data, Tracing APIOpenTelemetry expands its observability reach with a native Kotlin Multiplatform API and SDK. Contributed by Embrace, this update enables vendor-neutral telemetry across JVM, iOS, and web, offering idiomatic Kotlin support and optimized ...
Tekton Kubernetes-Native CI/CD Project Reaches CNCF Incubation
Adrian Bridgwater | | CI/CD, continuous delivery, continuous integration, devops, microservices, observability, software developmentThe CNCF TOC has voted to accept Tekton as an incubating project. As a Kubernetes-native framework for CI/CD, Tekton enables developers to build, test, and deploy across clouds by treating pipelines as ...
Five Great DevOps Job Opportunities
Mike Vizard | | devops jobs, DevOps Salary Report 2026, infrastructure engineering jobs, Principal DevOps Engineer, Release Management Engineer, Remote DevOps Roles, SAP Careers, Senior Lead Software Engineer, tech hiring trendsExplore this week’s top DevOps career opportunities featuring roles at SAP, Maximus, Inc., and Bellota Labs. Salaries range from $115k to $337k for senior and lead positions ...
Sophisticated Supply Chain Attack Targeting Trivy Expands to Checkmarx, LiteLLM
Jeff Burt | | AI (Artificial Intelligence), AI supply chain attacks, Aqua Security Trivy, Checkmarx, Cloud Security, credentials, exposed secrets, GitHub Actions, LiteLLM, microsoft, Palo Alto Networks, Sysdig, TeamPCPThe supply chain attack that compromised Aqua Security’s Trivy open source security vulnerability scanner and its associated GitHub Actions earlier this month continues to expand, with software development tools from Checkmarx and ...
Five Great DevOps Job Opportunities
Mike Vizard | | Bank of America Tech Careers, Cloud Platform Jobs, Developer Productivity Roles, DevOps hiring trends, DevOps Jobs 2026, DevOps Market Trends, DevOps Salary Report, IAM Engineering Jobs, Platform Engineering Jobs, Principal DevOps Engineer, Remote DevOps Roles, Senior DevOps Engineer NYC, site reliability engineering, Software Engineering Careers, Staff Software Engineer Salary, Tech Job Market InsightsExplore the latest DevOps.com weekly jobs report. Highlighting premier opportunities at Bank of America, Microsoft, and GEICO, with salary insights up to $300,000 for senior engineering and platform leadership roles ...
Two Malicious npm Packages Aim to Steal Credentials and Other Secrets
Jeff Burt | | API Keys, CI/CD pipelines, credential theft, Data Exfiltration, exposed secrets, GitHub repositories, maintainer account, malicious npm packages, sonatypeBad actors took over a npm maintainer account and have published two malicious packages designed to steal credentials, API keys, and other secrets from the computers of victims who download them from ...
