Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape episode artwork

EPISODE · Nov 16, 2025 · 27 MIN

Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape

from You've Already Been Hacked · host Professor CyberRisk

### 🔢 Episode Information |-------|-------|| **Title** | Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape || **Episode Number** | 3x31 || **Hosts** | Professor CyberRisk & Cyber Cowboy || **Guests** | None this episode |---### 👀 Overview Attackers keep evolving their tactics, and defenders can stay one step ahead by tightening supply‑chain hygiene. In this episode we dive into:1️⃣ The latest npm registry breach – 46,000 counterfeit packages flooding the ecosystem. 2️⃣ Four support stories that show how policy, data protection, visibility, and AI infrastructure are all part of the same threat matrix. ---### 🗣️ Topics Covered - **npm Supply‑Chain Attack** – How a worm‑like spam operation can compromise millions of projects. - **Policy & Vendor Risk** – EU’s ban on Huawei/ZTE as a real‑world example of hardware risk management. - **Data Resilience** – IBM Safeguarded Copy and immutable snapshots for ransomware protection. - **Visibility & Detection** – ThreatBook NDR’s top marks in Gartner Peer Insights™ 2025. - **AI Infrastructure Hardening** – Microsoft’s Atlanta AI “Super Factory” and what it means for zero‑trust architecture. ---| Title | URL ||-------|-----|| **Bitdefender Threat Map** | https://threatmap.bitdefender.com/ || **Checkpoint Live Cyber Threat Map** | https://threatmap.checkpoint.com/ || **Kaspersky Cyber Threat Map** | https://cybermap.kaspersky.com/ || **Talos Intelligence – ebc_spam Map** | https://talosintelligence.com/ebc_spam |---### 📚 Resources & Links - **npm audit guide:** https://docs.npmjs.com/cli/npm-audit - **Snyk dependency‑monitoring:** https://snyk.io/ - **IBM Safeguarded Copy whitepaper** – (link provided in episode) - **ThreatBook NDR product page** – https://threatbook.ai/nrd ---### 🚀 Call to Action 1. **Subscribe**: Stay updated on the latest cybersecurity threats. 2. **Leave a Review**: Let us know what you think. 3. **Join the Conversation**: Follow our community and ask questions.---### 🎙 Sponsor (if applicable) > No sponsors this episode---### 📲 Podcast Socials & Website | Platform | Link ||----------|------|| **Website** | https://www.youvealreadybeenhacked.com || **X** | @professorcyberrisk || **YouTube** | https://www.youtube.com/@YABHPodcast || **Discord/Community Forum** | https://discord.gg/cz3xdsrqAE

### 🔢 Episode Information |-------|-------|| **Title** | Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape || **Episode Number** | 3x31 || **Hosts** | Professor CyberRisk & Cyber Cowboy || **Guests** | None this episode |---### 👀 Overview Attackers keep evolving their tactics, and defenders can stay one step ahead by tightening supply‑chain hygiene. In this episode we dive into:1️⃣ The latest npm registry breach – 46,000 counterfeit packages flooding the ecosystem. 2️⃣ Four support stories that show how policy, data protection, visibility, and AI infrastructure are all part of the same threat matrix. ---### 🗣️ Topics Covered - **npm Supply‑Chain Attack** – How a worm‑like spam operation can compromise millions of projects. - **Policy & Vendor Risk** – EU’s ban on Huawei/ZTE as a real‑world example of hardware risk management. - **Data Resilience** – IBM Safeguarded Copy and immutable snapshots for ransomware protection. - **Visibility & Detection** – ThreatBook NDR’s top marks in Gartner Peer Insights™ 2025. - **AI Infrastructure Hardening** – Microsoft’s Atlanta AI “Super Factory” and what it means for zero‑trust architecture. ---| Title | URL ||-------|-----|| **Bitdefender Threat Map** | https://threatmap.bitdefender.com/ || **Checkpoint Live Cyber Threat Map** | https://threatmap.checkpoint.com/ || **Kaspersky Cyber Threat Map** | https://cybermap.kaspersky.com/ || **Talos Intelligence – ebc_spam Map** | https://talosintelligence.com/ebc_spam |---### 📚 Resources & Links - **npm audit guide:** https://docs.npmjs.com/cli/npm-audit - **Snyk dependency‑monitoring:** https://snyk.io/ - **IBM Safeguarded Copy whitepaper** – (link provided in episode) - **ThreatBook NDR product page** – https://threatbook.ai/nrd ---### 🚀 Call to Action 1. **Subscribe**: Stay updated on the latest cybersecurity threats. 2. **Leave a Review**: Let us know what you think. 3. **Join the Conversation**: Follow our community and ask questions.---### 🎙 Sponsor (if applicable) > No sponsors this episode---### 📲 Podcast Socials & Website | Platform | Link ||----------|------|| **Website** | https://www.youvealreadybeenhacked.com || **X** | @professorcyberrisk || **YouTube** | https://www.youtube.com/@YABHPodcast || **Discord/Community Forum** | https://discord.gg/cz3xdsrqAE

NOW PLAYING

Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape

0:00 27:42

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Eat to Live Jenna Fuhrman, Dr. Fuhrman Our health is our most precious gift and smart nutrition can change your life. Each month, join Dr. Fuhrman and his daughter, Jenna Fuhrman as they discuss important topics in the world of nutrition. Eat to Live will change the way you eat and think about food. French Your Way Jessica: Native French teacher founder of French Your Way Boost your French listening skills and test your comprehension with this one of a kind series of podcasts. Get the chance to listen to a real conversation between native speakers talking at normal speed AND customise your learning experience through carefully designed sets of questions (2 levels of difficulty) available for download at www.frenchvoicespodcast.com. All interviews also come with the transcript. French teacher Jessica interviews native speakers of French from around the world who share a bit of their life and passion. Where else would you meet in one same place a French yoga teacher based in Melbourne, a soap manufacturer from Provence, or a couple cycling around the world? HOMELAND HOMELAND The Church is a body not a building. It's the bride of Jesus Christ! Jesus is coming back for a mature bride. That means it's time for the church of Jesus Christ to move from milk to meat. This is the hour of maturity!HOMELAND is an announcement that the church is being set free. Only the church has the ability to transform the world. The kingdom's of this world will become the kingdoms of our Lord and Savior!All of creation has been waiting for this moment! Sons and daughters of God are rising up and taking their seat! DIOSA. Carolina Sanper This podcast is a sacred space created by Carolina Sanper where you connect with your inner wisdom and embody your magnetic feminine power.It is the realization that the mystical realm is where you plant the seeds of your desired reality.It is a portal to your true essence: awareness, presence, and receiving with ease. Welcome home, DIOSA. 🖤

Frequently Asked Questions

How long is this episode of You've Already Been Hacked?

This episode is 27 minutes long.

When was this You've Already Been Hacked episode published?

This episode was published on November 16, 2025.

What is this episode about?

### 🔢 Episode Information |-------|-------|| **Title** | Supply‑Chain Siege: Fake NPM Packages + the New AI Threat Landscape || **Episode Number** | 3x31 || **Hosts** | Professor CyberRisk & Cyber Cowboy || **Guests** | None this episode |---### 👀...

Can I download this You've Already Been Hacked episode?

Yes, you can download this episode by clicking the download button on the episode player, or subscribe to the podcast in your preferred podcast app for automatic downloads.
URL copied to clipboard!