Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape episode artwork

EPISODE · Nov 16, 2025 · 27 MIN

Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape

from You've Already Been Hacked · host Professor CyberRisk

### 🔢 Episode Information |-------|-------|| **Title** | Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape || **Episode Number** | 3x31 || **Hosts** | Professor CyberRisk & Cyber Cowboy || **Guests** | None this episode |---### 👀 Overview Attackers keep evolving their tactics, and defenders can stay one step ahead by tightening supply‑chain hygiene. In this episode we dive into:1️⃣ The latest npm registry breach – 46,000 counterfeit packages flooding the ecosystem. 2️⃣ Four support stories that show how policy, data protection, visibility, and AI infrastructure are all part of the same threat matrix. ---### 🗣️ Topics Covered - **npm Supply‑Chain Attack** – How a worm‑like spam operation can compromise millions of projects. - **Policy & Vendor Risk** – EU’s ban on Huawei/ZTE as a real‑world example of hardware risk management. - **Data Resilience** – IBM Safeguarded Copy and immutable snapshots for ransomware protection. - **Visibility & Detection** – ThreatBook NDR’s top marks in Gartner Peer Insights™ 2025. - **AI Infrastructure Hardening** – Microsoft’s Atlanta AI “Super Factory” and what it means for zero‑trust architecture. ---| Title | URL ||-------|-----|| **Bitdefender Threat Map** | https://threatmap.bitdefender.com/ || **Checkpoint Live Cyber Threat Map** | https://threatmap.checkpoint.com/ || **Kaspersky Cyber Threat Map** | https://cybermap.kaspersky.com/ || **Talos Intelligence – ebc_spam Map** | https://talosintelligence.com/ebc_spam |---### 📚 Resources & Links - **npm audit guide:** https://docs.npmjs.com/cli/npm-audit - **Snyk dependency‑monitoring:** https://snyk.io/ - **IBM Safeguarded Copy whitepaper** – (link provided in episode) - **ThreatBook NDR product page** – https://threatbook.ai/nrd ---### 🚀 Call to Action 1. **Subscribe**: Stay updated on the latest cybersecurity threats. 2. **Leave a Review**: Let us know what you think. 3. **Join the Conversation**: Follow our community and ask questions.---### 🎙 Sponsor (if applicable) > No sponsors this episode---### 📲 Podcast Socials & Website | Platform | Link ||----------|------|| **Website** | https://www.youvealreadybeenhacked.com || **X** | @professorcyberrisk || **YouTube** | https://www.youtube.com/@YABHPodcast || **Discord/Community Forum** | https://discord.gg/cz3xdsrqAE

Episode metadata supplied by the publisher feed · Published Nov 16, 2025

Embed this episode

Ready to play

Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape

0:00 27:42

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

No similar episodes found.

No similar podcasts found.

Frequently Asked Questions

How long is this episode of You've Already Been Hacked?

This episode is 27 minutes long.

When was this You've Already Been Hacked episode published?

This episode was published on November 16, 2025.

Can I download this You've Already Been Hacked episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.
URL copied to clipboard!