Welcome to Tech Beat, your daily look at what's moving in technology.
A supply chain attack called TrapDoor is making the rounds across three major package registries — PyPI, NPM, and crates dot io. The malware is designed to steal cryptocurrency, and its reach across multiple ecosystems at once makes this one worth paying close attention to if you're a developer pulling in open source dependencies.
Shifting to AI infrastructure, a new service called AgentGate is raising a pointed question: when an AI agent acts on your behalf, OAuth can verify who you are, but it has no visibility into what the agent is actually doing. As autonomous agents gain access to real systems and real data, that authorization gap is starting to look less like a footnote and more like a structural problem.
And in a move that blurs some interesting lines, ChatGPT users can now purchase Bitcoin, XRP, Solana, and other cryptocurrencies directly through the chatbot, via an integration with MoonPay. It's a notable step toward making a conversational AI interface into a transactional one — and it raises fresh questions about what we actually want these systems to become.
Keep surfing. Tech Beat out.
