North Korea's Fake Company Hack and the Chinese Model Takeover

The infrastructure AI depends on — from open-source packages that agents install automatically to the models powering Silicon Valley's products — is increasingly built, maintained, or compromised by actors outside the US. North Korean operatives built an entire fake company to compromise a JavaScript developer maintaining a widely-used package. Meanwhile, Chinese AI models are deeply embedded in US tech companies' production workflows, even as Alibaba signals a shift away from open-source. Three simultaneous regulatory battles — a First Amendment challenge to AI law in Colorado, a data center construction ban in Maine, and the first conviction under the Take It Down Act — are shaping a fragmented governance landscape. The common thread is dependency: on vulnerable maintainers, on foreign model providers, and on an unresolved regulatory patchwork.

STORIES COVERED

North Korean hackers build fake company to compromise JavaScript developer — Security thread on X | TechCrunch

Silicon Valley quietly runs on Chinese open source AI models — Recode China AI (Substack)

GLM-5.1 by Zhipu AI reaches #3 in Code Arena — Arena.ai on X

China holds 6 of top 9 spots in global AI model usage ranking — OpenRouter data via X

Alibaba's Qwen shifts toward revenue over open-source AI development — Financial Times

xAI sues Colorado to block new AI regulation law on First Amendment grounds — Cointelegraph on X

Maine advances bill to ban major new data center construction — Gadget Review

First conviction under Take It Down Act for creating AI deepfake nudes — Ars Technica

OpenAI backs Illinois bill limiting AI lab liability for model harms — Wired

Florida AG investigates OpenAI over shooting allegedly involving ChatGPT — TechCrunch

Stalking victim sues OpenAI claiming ChatGPT fueled abuser's delusions — TechCrunch

OpenAI CEO Sam Altman's home targeted with Molotov cocktail — The Verge | Wired

OpenAI pauses UK Stargate data center project over costs and regulation — BBC

Disclaimer: The Context Report is an AI-produced podcast. Every episode goes through multiple layers of automated verification and review, but no system is perfect — accuracy gaps are possible and claims should not be taken as absolute fact. This content is for informational purposes only and does not constitute financial, legal, or professional advice. Listeners should independently verify any information before making decisions. We a...