Ravie Lakshmanan covers Aikido's findings linking the packages to North Korea's Graphalgo campaign, with a Go implant that takes orders through Slack and a blockchain dead drop. The two providers drew 1,671 downloads, and researchers warn registries may be next.

Naveena Ravi walks through enabling Karpenter on EKS with the eks-blueprints-addons module, pinned to Karpenter 0.37.0, and shares the four errors hit along the way. Fixes include a dnsPolicy patch and relabeling CRDs for Helm, which clears the stuck nodeclaim.

Martin Liu builds a Control Tower substitute for AWS China, where the service does not exist, using Organizations, Identity Center, StackSets and Terraform. A new team vends in 45 seconds, and nine gotchas plus three Config bootstrap failures come with root causes.

The post closes the loop on a GitHub Actions infrastructure delivery series, moving from reviewing plans to applying them. It shows how a merge to main can trigger terraform apply, so approved changes reach the cloud without anyone running commands by hand.

Rafael de Carvalho built tf-exclude, a Go CLI that fills the gap left by Terraform's missing -exclude flag, turning 198 hand-written -target flags into one. It finds dependents through the plan graph, supports globs, and refuses patterns that match nothing.