469: Miasma in the Machine: Red Hat’s NPM Breach & GitHub's Shocking AI Bill : Episode 469

About this episode

The episode discusses significant Linux, hardware, and cybersecurity news, including a supply chain attack on Red Hat's NPM channel and GitHub's controversial AI billing changes.

In Episode 469 of Destination Linux, hosts Jill and Zeb are joined by guest co-host Craig from Sandfly Security to unpack a massive week of Linux, hardware, and cybersecurity news while Ryan recovers from surgery. The hardware segment kicks off with a look at Computex 2026, where AMD delighted budget-conscious builders by extending AM5 socket support through 2029 and launching two affordable new X3D processors. Meanwhile, Nvidia shook up the landscape by unveiling the RTX Spark Superchip—a power-efficient Arm CPU/GPU hybrid aimed at turning desktops into agentic AI environments, with Linux kernel compliance already on the horizon. In security and development news, the panel dives into a sophisticated supply chain attack that backdoored dozens of popular packages under Red Hat's official NPM channel using a credential-stealing worm named Miasma. Craig shares vital strategies for handling software supply chain risks, advising developers to age their packages and stick to building inside containers or remote hosts. The team also discusses the community backlash surrounding GitHub Copilot’s shift to a usage-based "AI Credit" system, which has reportedly caused estimated costs to…

People in this episode

Hosts: Jill, Zeb

Guest: Craig

Topics covered

• Linux news
• hardware updates
• cybersecurity
• software supply chain
• AI developments
• community backlash

Keywords

• Linux
• Red Hat
• GitHub
• cybersecurity
• supply chain attack
• AI
• Computex 2026
• Nvidia
• AMD

Mentioned in this episode

Organizations: Red Hat, GitHub, Sandfly Security, EFF, Phoronix

Products: RTX Spark Superchip, AM5 socket

Books & works: Linux 7.1

More episodes of Destination Linux

• 468: Destination Linux 468: Sailing the ARM Seas with Nvidia N1X & Lutris Gaming! (Live, Raw, Uncut) · June 1, 2026 · 2h 51m
• 467: Destination Linux 467: KDE’s Massive Windfall, Red Hat Summit Recap, & AI Choking the Power Grid · May 25, 2026 · 1h 21m
• 466: From Server Purgatory to Paradise & The 30th Birthday of Tux! · May 18, 2026 · 1h 4m
• 465: The RAMpocalypse & He Who Shall Not Be Named! · May 11, 2026 · 48 min
• 464: AI Security: Tool or Threat? Plus Ubuntu 26.04 "Resolute Raccoon" · May 4, 2026 · 1h 7m
• 463: Resistance is NOT Futile: RESIST the Digital Lockdown: Episode 463 · April 27, 2026 · 1h 31m