Liran Tal • 12/6/2018

A Snyk’s Post-Mortem of the Malicious event-stream npm package backdoor

This article provides a post-mortem analysis of the event-stream npm package incident, where a malicious dependency (flatmap-stream) was added, affecting millions of downloads. It details the timeline of events, the social engineering tactics used by the attacker, and the security implications for the open-source ecosystem.

0 comments

#security #npm #Supply Chain Attack