GitHub’s video episode of The Download recaps developer news including a supply chain incident, an MCP security roadmap, and updates to GitHub Copilot—highlighting the Copilot SDK public preview and Copilot CLI support for BYOK and local models.

The Download: Copilot SDK, Claude Mythos, AI models are protecting each other & more

Welcome back to another episode of The Download.

What this episode covers

• A supply chain attack involving the Axios npm package
• A story on AI models/agents “protecting each other”
• GitHub Copilot SDK reaching public preview
• Copilot CLI adding support for BYOK and local models
• “Claude Mythos” and cybersecurity/vulnerability-related discussion
• A viral “AI memory tool” story (MemPalace)
• A brief note about GitHub Universe 2026 (call for speakers)

Chapters

• 00:00 Welcome to The Download
• 00:32 Axios package hijacked in supply chain attack
• 01:45 MCP gets enterprise-ready with security roadmap
• 02:58 GitHub Universe 2026 call for speakers
• 03:38 GitHub Copilot SDK hits public preview
• 04:34 Copilot CLI supports BYOK and local models
• 05:07 Anthropic's Claude Mythos takes on cybersecurity
• 06:21 AI models are protecting each other
• 07:28 Milla Jovovich's MemPalace AI tool goes viral
• 08:44 Outro

Resources (as shared in the video description)

• GitHub Universe 2026 call for sessions open: https://reg.githubuniverse.com/flow/github/universe26/cfs/page/cfs-landing
• MCP maintainers enterprise security roadmap: https://thenewstack.io/mcp-maintainers-enterprise-roadmap/
• Axios postmortem (GitHub issue): https://github.com/axios/axios/issues/10636
• Copilot SDK in public preview: https://github.blog/changelog/2026-04-02-copilot-sdk-in-public-preview/
• Copilot CLI supports BYOK and local models: https://github.blog/changelog/2026-04-07-copilot-cli-now-supports-byok-and-local-models/
• AI agents “peer preservation” / models protecting each other:
  • https://metodoviral.com/en/news/ai-agents-protect-each-other-research-says/
  • https://rdi.berkeley.edu/blog/peer-preservation/
• Anthropic’s Project Glasswing: https://www.anthropic.com/glasswing
• MemPalace links:
  • https://cybernews.com/ai-news/milla-jovovich-mempalace-memory-tool/
  • https://github.com/milla-jovovich/mempalace
  • https://www.instagram.com/reel/DWzNnqwD2Lu/

GitHub channels

• YouTube: https://gh.io/subgithub
• Blog: https://github.blog
• X: https://twitter.com/github
• LinkedIn: https://linkedin.com/company/github
• Insider newsletter: https://resources.github.com/newsletter/
• Instagram: https://www.instagram.com/github
• TikTok: https://www.tiktok.com/@github

About GitHub (from the description)

GitHub is a platform where developers build and ship software.

• https://github.com