<p><strong>TLDR:</strong> npm v12 lands in July with install scripts blocked by default — Yarn and pnpm have done this for years, so npm is the last major package manager to catch up. AWS launched Graviton5-powered M9g instances with a formally verified isolation kernel written in Rust, the first such component in a production commercial cloud. Microsoft pulled 73 GitHub repos after a malware attack targeting AI coding agent users, and the ServiceNow data exposure from yesterday’s digest turns out to be wider than initially reported. Datadog’s DASH 2026 conference dropped a large batch of announcements worth scanning if you run observability infrastructure.</p>
<hr>
<h2>npm v12 blocks install scripts by default, arriving July 2026</h2>
<p>GitHub confirmed npm v12 will block automatic execution of preinstall, install, and postinstall scripts from dependencies unless explicitly approved. The change also blocks git-based and remote URL dependencies by default. Critics are right to note that Yarn, pnpm, and Bun have blocked third-party install scripts for years — npm is the last major package manager to adopt this stance, delayed by ecosystem compatibility concerns around native modules, Playwright, Cypress, Electron, and Husky. The new opt-in model creates an auditable allowlist of packages permitted to execute code, which matters for regulated environments. Upgrade to npm 11.16.0 now to surface warnings before the breaking change lands. The timing is pointed given the @tanstack supply chain attack on May 11 that compromised 84 packages via a GitHub Actions pwn request and cache poisoning — SLSA L2 provenance attestations were present but didn’t prevent it, since L2 doesn’t require build isolation. <a href="https://app.daily.dev/feed-by-ids?id=Lq84IIDjT&amp;id=utLKR6LO8&amp;id=ydFAsLRc8&amp;id=Z94coFuNL" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>AWS Graviton5 ships with formally verified VM isolation kernel</h2>
<p>AWS launched EC2 M9g and M9gd instances on Graviton5, which doubles Graviton4’s core count to 192, moves to TSMC’s 3nm process, and delivers up to 25% better compute and 35% faster ML inference. The standout is the Nitro Isolation Engine — a separation kernel written in Rust, formally verified using the Isabelle/HOL proof assistant across 330,000 lines of machine-checked mathematics. It’s the first formally verified component shipping in a production commercial cloud. Real-world numbers from early adopters: ClickHouse and Honeycomb report 36% performance gains, HubSpot saw MySQL query durations drop up to 60%. Meta is deploying at tens of millions of cores for agentic AI workloads. Available now in select US and EU regions. <a href="https://app.daily.dev/feed-by-ids?id=LyCK4KA1b&amp;id=1JX26G1AN&amp;id=f2qitFBqa" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Microsoft pulls 73 GitHub repos after malware attack targeting AI coding agent users</h2>
<p>Microsoft shut down 73 of its own GitHub repositories after a malicious commit in the durabletask repository was designed to steal developer credentials from users of Claude Code, Gemini CLI, and Cursor. This appears to be a re-compromise following a similar May incident involving threat actor TeamPCP. Microsoft has been vague about affected developer count, saying only ‘a small number of customers’ were notified. Security researchers frame this as part of a broader shift: attackers are now targeting trust infrastructure — credentials, build systems, signing services — rather than source code itself. Rotate exposed credentials, review OIDC trust relationships, and enforce least privilege on service accounts. <a href="https://app.daily.dev/posts/KLWp4mgLa" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Datadog DASH 2026 drops broad observability and security announcements</h2>
<p>Datadog’s DASH 2026 conference produced a large batch of releases. On the AI side: Bits Code (now GA) converts production findings into GitHub PRs, Bits Detection autonomously creates and maintains monitors, Bits Threat Hunting runs hypothesis-driven threat hunts across logs and network flows, and Infinite Cardinality Metrics removes cardinality as a cost constraint by pricing per metric name rather than per time series. On security: AI-native SAST claims up to 3x higher true positive rates on OWASP benchmarks, Code Threat Detection analyzes PRs for supply chain attacks, and the Runtime Prioritization Engine claims 95% reduction in vulnerability noise using live APM traces. Federated Logs lets you query ClickHouse, Databricks, S3, and Snowflake from a single Log Explorer interface. Disaster Recovery (DDR) is now GA for maintaining observability during cloud provider outages. <a href="https://app.daily.dev/feed-by-ids?id=wkEwqezId&amp;id=94jBzHaJY&amp;id=6TXlP02Nt&amp;id=D8Yo1fOCD&amp;id=FPKpv6KV8&amp;id=UPXYrFmOz&amp;id=AnxnyTFHl" target="_blank" rel="noopener nofollow">Read more</a></p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>ServiceNow data exposure broader than initially reported:</strong> Yesterday’s digest covered the June 5 patch; today Reddit users outside Australia are reporting evidence of external access to their instances from IP 51.159.98.241, suggesting the exposure was not limited to Australian customers as ServiceNow initially indicated. <a href="https://app.daily.dev/posts/2syPGhMJ4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>JDY botnet linked to Volt Typhoon grows from 650 to 1,500+ compromised devices:</strong> The China-linked JDY botnet has more than doubled in size since January 2024, now scanning for newly disclosed vulnerabilities within hours of publication and feeding targeting data to nation-state groups via Tor-based C2 — traditional IP-based defenses are ineffective against traffic blending from thousands of residential IPs. <a href="https://app.daily.dev/feed-by-ids?id=XQb8RcEt8&amp;id=ZLFIR5RFt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js HIGH severity security releases scheduled for June 17, 2026:</strong> The Node.js project has announced security releases for versions 26.x, 24.x, and 22.x on June 17, all rated HIGH severity — patch immediately when they drop, and end-of-life version users should treat this as a forcing function to upgrade. <a href="https://app.daily.dev/posts/VInY3ZcTj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitLab Orbit context graph delivers 11x faster AI agent queries, 4.5x fewer tokens:</strong> GitLab Orbit (public beta) builds a live queryable graph of code, pipelines, deployments, and vulnerabilities — connecting AI agents via MCP so they retrieve precise context in one or two queries instead of crawling files, with benchmarks showing 45x fewer hallucinations at GitLab’s scale of 500 million nodes and 2 billion edges. <a href="https://app.daily.dev/feed-by-ids?id=6Y8F7sYFy&amp;id=AkVL02GvC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Exchange Server zero-day CVE-2026-42897 actively exploited, patch now available:</strong> Microsoft’s June 2026 updates patch an actively exploited XSS zero-day in Exchange Server 2016, 2019, and Subscription Edition that allows unauthenticated remote attackers to execute arbitrary JavaScript via a crafted email opened in Outlook Web Access — CISA added it to KEV on May 15 and ordered federal agencies to patch by May 29. <a href="https://app.daily.dev/posts/P0iC0Hphn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>


Server-side development, system design, API patterns, and distributed architecture.

Backend Digest

A developer news digest covering several major stories: npm v12 (arriving July 2026) will block install scripts by default, making it the last major package manager to adopt this security stance — upgrade to npm 11.16.0 now to surface warnings early. AWS launched Graviton5-powered M9g instances featuring the Nitro Isolation Engine, a Rust-based separation kernel formally verified with Isabelle/HOL — the first formally verified component in a production commercial cloud, with early adopters reporting 36–60% performance gains. Microsoft pulled 73 GitHub repos after a malicious commit targeted credentials of Claude Code, Gemini CLI, and Cursor users. Datadog's DASH 2026 conference announced a broad set of observability and security features including AI-native SAST, autonomous monitoring, and federated log querying. Also notable: ServiceNow's data exposure is wider than initially reported, a Node.js HIGH severity patch is scheduled for June 17, a China-linked botnet has grown to 1,500+ devices, and an Exchange Server zero-day is actively exploited.

npm v12 blocks install scripts, AWS Graviton5 ships formally verified VM isolation