Welcome to Tech Beat, here's what's moving in the world of technology today.
A Finnish satellite company called ICEYE, which has been providing radar imagery to Ukraine, now has four Russian satellites maneuvering into close proximity with one of its spacecraft. It's a stark reminder that the conflict on the ground has a shadow war playing out six hundred kilometers above it, where the rules are far less clear.
Closer to home, a quiet but serious failure hit the software development world when a bug in GitHub's merge queue silently corrupted code across six hundred and fifty eight repositories. The word "silently" is doing a lot of work there — developers trusted the system, the system said nothing was wrong, and the damage accumulated before anyone noticed.
And in security, attackers managed to publish six hundred and thirty three malicious packages to the npm registry, and every single one passed Sigstore's provenance verification. The system worked exactly as designed — it confirmed a valid certificate, a real CI environment, a proper transparency log entry. The attacker had simply compromised a legitimate maintainer account first, which is a deeply uncomfortable lesson about where trust actually lives in a supply chain.
That's the day in tech. Keep surfing. Tech Beat out.
