Welcome to Tech Beat, your daily read on the stories shaping the digital world.
Security researchers are flagging a fresh supply chain threat, with the intercom-client package on NPM and several lightning packages on PyPI found to be compromised. These are the kinds of quiet, low-profile attacks that do real damage — developers pulling in trusted tools and unknowingly shipping malware to their own users. Audit your dependencies.
Across the Pacific, Chinese researchers are advancing an iron-based battery technology that could cost nearly eighty times less than lithium alternatives while lasting up to sixteen years without meaningful degradation. It uses a water-based electrolyte, which means no explosion risk, and iron is one of the most abundant elements on the planet. If it scales, this could meaningfully reshape the global energy storage equation.
And in Utah, a new law targeting VPN services goes into effect next week. The Electronic Frontier Foundation is raising alarms, arguing the legislation could expose users who rely on VPNs for legitimate privacy and security purposes. It's part of a broader national pattern of states reaching into internet infrastructure in ways that privacy advocates say create more risk than they resolve.
Keep surfing. Tech Beat out.
