Learn
archived
Unit 42: npm Supply Chain Threat Landscape Updated July 2026
- Engineer — Learn: The updated analysis covers wormable malware patterns, CI/CD persistence techniques, and multi-stage npm attack chains — useful for hardening your pipeline and package vetting posture, but no specific package compromise or KEV signal requiring immediate action today.
- SOC/IR — Learn: The breakdown of npm attack TTPs (worm propagation, CI/CD persistence) helps tune detection logic for build pipeline anomalies, but no concrete IOCs or active campaign indicators are surfaced in this item.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.