Reddit wants AI to run moderation. Its moderators aren't sold.

Deleted Dispatch is a weekly read on security, OSINT and privacy news. This week runs on a few threads: Reddit is testing AI to replace Automod, a single Metabase flaw keeps producing named victims, and two separate npm supply chain worms are moving in parallel.

Reddit tests AI to replace Automod

On August 5, Reddit announced Rules Hub, a system that uses a language model to judge posts against the intent of a subreddit's rules instead of matching keywords, with a stated goal of eventually retiring Automod. Reddit says it has run in more than 700 communities and is now rolling out to every newly created subreddit, with a wider release planned later in 2026. Beta moderators are not sold. Some report it enforcing as few as two of their eight rules, several have said they may step down, and Reddit's VP of Community has said Automod stays on until Rules Hub earns its place.

Primary source: Forbes. Corroborating: TechCrunch. Confidence: confirmed, from Reddit's own announcement and on record moderator accounts across outlets.

The shift from keyword rules to a model that judges intent changes both the volume and the character of what gets removed, and it will not land the same way across every community. That is the real change to track as the rollout widens past new subreddits.

One Metabase bug, several companies exposed

Metabase disclosed a flaw in a publicly reachable endpoint, rated the maximum severity of 10.0, that let an attacker with no login gain full admin access to affected instances. Exploitation started on August 3, and customer notices went out on August 6. Framework, the modular laptop maker, told "all customers" on August 7 that names, emails, phone numbers and addresses were exposed. Payment hardware maker Tally confirmed a similar exposure, and LexisNexis said it was affected through a third party. The list is still growing.

Primary source: BleepingComputer. Corroborating: TechCrunch on Framework and Metabase's own update. Confidence: confirmed for Framework and Tally, both on record with specifics; reported for the wider victim list.

One flaw in a shared tool, several unrelated companies exposed. That is the vendor risk pattern, and it repeats every few months: the weak point is often not your own code, but the third party services wired into it. Anyone running a public Metabase instance should treat patching and rotating credentials as urgent.

Two npm worms, and they are not the same

Two separate npm supply chain stories are running this week, and a lot of coverage is blurring them. The first, reported earlier in the week, is a worm in the keyv and cacheable packages that spreads through install hooks. The second, reported on August 7 by an independent researcher, is a set of nearly 800 packages with typosquatted or machine generated names that pull a cross platform remote access tool and an infostealer, and it asks developers to load it with a plain require call rather than an install hook. Different mechanism, different campaign.

Primary source: The Hacker News. Confidence: reported, from a single researcher so far, and would firm up if a second team confirms the package count and behavior.

Most coverage is running the two together, but the fix and the blast radius are not the same. If you see "npm worm" headlines this week, check which campaign each one means before acting on it.

Mac malware that checks who is looking

Microsoft reported a ClickFix operation running across more than 250 lookalike domains that now fingerprints the browser before it shows its fake download, so crawlers and scanners see a clean page while selected macOS visitors get served the lure. The payload is Atomic Stealer, which goes after passwords, browser data and crypto wallets. Microsoft traced the hosting to a sanctioned provider.

Primary source: Microsoft Security Blog. Corroborating: The Hacker News. Confidence: confirmed, vendor research with named infrastructure.

The practical takeaway is the tell: a "run this command to fix it" prompt is the trap. If a page tells you to paste something into a terminal or a Run box to view a file, close it.