“Attackers published 84 malicious versions of official…” — CyberWire Daily at 6:42
“Attackers published 84 malicious versions of official 10-stack NPM packages in a six-minute supply chain attack that exposed developers to credential theft, self-propagating malware, and potential disk wiping. Researchers say the attackers exploited a GitHub Actions cache poisoning weakness to steal NPM publishing…”
0:00
38:10