DevOps Bulletin

Uninstalling the malicious Claude Code extension may leave its payload running. Cursor found a modified package in its marketplace affecting at most 5,000 users. It added an SSH key and persistence scripts that can survive the uninstall.

Gemini 4 Carbon is launching for cyber defenders before the rest of us. Google says its teams have used it on engineering tasks that run for days. Access starts with selected Fairwind partners, with broader developer availability coming later.

ServiceNow lists up to $308,200 base pay for a role governing AI spend. The Santa Clara job covers usage anomalies, model tiering, caching and context reduction. Someone has to turn 'just let the agents run' into a budget.

Copilot can now fix the red checks keeping your PR open. Agent Merge watches failing Actions workflows and merge conflicts, then works on fixes in the cloud. It's a paid Copilot feature; auto-merge remains a separate setting.

Your GitHub Actions runner can move to AWS without a YAML change. GitHub is adding AWS capacity for eligible Linux jobs. If your firewall or Entra policy only trusts Azure IPs, the workflow can stay identical while authentication breaks.

One model cost about $8 or $24 per task in AWS's benchmark. The heavier agent harness spawned subagents that added tokens and runtime without improving the score. Before swapping models, check what your agent is spending turns on.

A file in Downloads told a coding agent to install malware. Forever Security traced a blocked npm install to a planted AGENTS.md disguised as engineering notes. The agent was treating the attacker's setup instructions as part of its job.

GitHub Actions can leak secrets without contacting an attacker's server. Wiz found Gheist using stolen tokens to plant workflows, encode secrets into logs, download them through GitHub's API, then delete the runs. The exfiltration channel was GitHub itself.

A libcurl security patch exposed a Git bug and broke HCP Terraform runs. The Git bundled with tfc-agent failed on some VCS HTTP redirects after the update. HashiCorp shipped tfc-agent 1.33.3 with the fix.

Your GCP bill can fund an attacker's Gemini usage. Wiz found stolen credentials being used to link external projects to victims' billing accounts. The workloads stayed in the attackers' projects.