supply chain attack
3 posts
Article
Identity Continuity Failure in WordPress Plugin Supply Chain Compromise
A set of 30 WordPress plugins contained identical backdoors with synchronized timestamps and shared obfuscation patterns. The failure stemmed from lack of identity continuity enforcement across the software lifecycle, allowing coordinated malicious uploads without detection.
Article
Axios Compromise: What Actually Happened
An analysis of the axios supply chain compromise, focusing on how compromised credentials enabled malicious code distribution and why trust in software registries without verification is a systemic risk.
Article
The Real Failure in the axios npm Compromise Wasn't Code - It Was Trust
The [email protected] and [email protected] npm compromise was not a code flaw - it was a failure in trust validation. Credential theft enabled persistent supply chain poisoning due to lack of enforced MFA and session verification at every publish event.