“Using stolen credentials, it modifies repositories…” — CyberWire Daily at 6:19
“Using stolen credentials, it modifies repositories, inserts malicious code into software packages, and republishes infected versions to NPM, creating a self-propagating supply chain attack. The malware includes advanced features such as per-string encryption, Tor-based command and control, and an eBPF rootkit that…”
0:00
30:27