Uploaded September 2025 | Updated September 2026, 10 hours ago

---

There's a new supply chain attack in town, and this one propagates using a worm...inside npm. In this video I'll go over a few blog posts, and am joined by Charlie Eriksen who has spent a lot of time recently researching npm supply chain malware!

Blogs and links used in this video:

https://x.com/CharlieEriksen
https://x.com/gabsmashh
https://socket.dev/blog/tinycolor-supply-chain-attack-affects-40-packages
https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages
https://www.aikido.dev/blog/s1ngularity-nx-attackers-strike-again
wiz.io/blog/shai-hulud-npm-supply-chain-attack
getsafety.com/blog-posts/shai-hulud-npm-attack
npmjs.com/package/@aikidosec/safe-chain

0:00 Intro
1:25 Blog Review
8:26 Q&A with Charlie Eriksen
18:57 Outro

X: https://x.com/0xTib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social
Twitch: twitch.tv/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
LinkedIn: linkedin.com/in/tib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
TikTok: tiktok.com/@0xtib3rius
Instagram: instagram.com/0xtib3rius
Threads: threads.net/@0xtib3rius
Facebook: facebook.com/0xTib3rius