supply chain attack Podcast Summaries
supply chain attack on Yedapo: 3 summarized podcast and YouTube episodes. Each includes key takeaways, core concepts and notable quotes with timestamps.
the WORST hack of 2026
NetworkChuck
Mar 31, 2026
A sophisticated supply chain attack compromised the Axios HTTP library, allowing attackers to deploy remote access Trojans via a malicious dependency. By hijacking a maintainer's NPM token, the attackers bypassed standard security guardrails to infect systems in under 1.1 seconds, leaving no trace behind after self-deleting the malicious code.
Key insight: The average NPM project trusts between 200 and 2,100 strangers with code execution, creating a massive, invisible attack surface where a single compromised dependency can grant attackers total system access.
BREAKING: LiteLLM Has Been Compromised — What You Need to Know and Do Immediately
Fahd Mirza
Mar 24, 2026
A malicious update to the LiteLLM package has transformed a critical AI infrastructure tool into a silent credential harvester. Fad Mira explains how this sophisticated three-stage attack bypasses standard imports to exfiltrate everything from SSH keys to AWS secrets.
Key insight: The attack was only exposed because a coding flaw in the malware caused infected machines to crash; had the attackers throttled the process, the theft of credentials across 97 million downloads might have remained undetected for months.
Você Usa NPM? Alerta Grave
Filipe Deschamps
Sep 9, 2025
Hackers comprometeram pacotes populares no npm com mais de 2 bilhões de downloads semanais. O ataque via phishing resultou em um malware que desvia transações de criptomoedas, demonstrando a fragilidade das cadeias de dependência de código.
Key insight: O volume total dos pacotes infectados soma 2,7 bilhões de downloads semanais, sendo 207 vezes maior que o volume semanal do Next.js.