#axiosnpm

Watch this clip. Joshua Wright described this exact attack at RSAC five days ago. Today it happened to one of the most downloaded packages on the planet. Attackers hijacked the #Axiosnpm package this morning. 100 million weekly downloads. 600,000 installs of a credential-stealing backdoor in three hours. Joshua Wright and Rich Greene did an emergency SANS livestream this morning breaking down exactly what happened. The part that caught my attention: the attack deployed separate payloads for Mac, Windows, and Linux simultaneously. Josh isn't ready to call it confirmed, but the pattern points to AI acceleration. Josh's full analysis and steps you should take: Watch Josh's keynote if you missed it. SANS Institute edskoudis Heather Mahalik Barnhart Barnhart Robert M. Lee #AxiosCompromise #AxiosSupplyChain