# Thoughts & Stories: 9 / 137

> Sharing my experiences, learnings, and adventures in tech and beyond.

URL: https://www.matthewswong.com/en/blog/page/9/

- [npm Trusted Publishing: 48-Hour Expiry and issue_comment Ban](https://www.matthewswong.com/en/blog/npm-trusted-publishing-48-hour-expiry-issue-comment/)
- [Hijacked AI Coding Assistant Session Spread Shai-Hulud Worm](https://www.matthewswong.com/en/blog/hijacked-ai-coding-assistant-session-shai-hulud-100-repos/)
- [npm Worm With Valid SLSA Provenance: The keyv Lesson](https://www.matthewswong.com/en/blog/npm-valid-slsa-provenance-malicious-keyv-worm/)
- [kubectl-ai Guide: Confirmation Gate, Limits and MCP Server Risk](https://www.matthewswong.com/en/blog/kubectl-ai-google-human-in-loop-guide/)
- [EU AI Act Digital Omnibus Deadlines: A DevOps Team Calendar](https://www.matthewswong.com/en/blog/eu-ai-act-digital-omnibus-devops-deadlines/)
- [Tensorlake npm Shai-Hulud Compromise: Lock Down Install Scripts](https://www.matthewswong.com/en/blog/tensorlake-npm-shai-hulud-ai-sdk-worm/)

---

- HTML version: https://www.matthewswong.com/en/blog/page/9/
- Bahasa Indonesia: https://www.matthewswong.com/id/blog/page/9/
- Site index for agents: https://www.matthewswong.com/llms.txt
- Sitemap: https://www.matthewswong.com/sitemap.xml
- API description (OpenAPI): https://www.matthewswong.com/openapi.json