History’s largest npm supply chain attack - phishing gave attackers control over packages with 2 billion+ wee…

8 comments ·

@rekt (Rekt News)

History’s largest npm supply chain attack - phishing gave attackers control over packages with 2 billion+ weekly downloads. They slipped in a polished crypto-stealer - only to drop it into server builds. The malware broke CI-CD, outed itself, and the epic heist netted just $1,050. Read more at https://rekt.news/npm-heist