Supply Chain Attacks

This month marked the discovery of one of the largest NPM compromises in history. Though AI-assisted social engineering, a profilic developer dubbed Qix was phished. His account was then maliciously used to publish poisoned packages, many of which were used to manipulate crypto transactions. Thankfully, it was detected before too many users downloaded these packages, but it highlights how vulnerable we can be if these upstream components get compromised. In this special State of Cybercrime episode, Matt and David break down this NPM compromise, and cover everything else new in the world of cybercrime. Want to join us live? Save a seat here: More from Varonis ⬇️ Visit our website: LinkedIn: X/Twitter: Instagram:

You can listen to Supply Chain Attacks online on Radio and Podcast. Open the player on this page to stream the available audio.

Supply Chain Attacks is an episode from Inside Out Security by Mike Buckbee.

This episode is 00:24:16 long.

This episode was published on Sep 20, 2025.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Inside Out Security when more episodes are available from the podcast feed.