Poisoned Pipeline / Incidents / AS173
Spearphishing campaign abuses npm registry
Socket: spearphishing campaign abuses the npm registry to target U.S. and allied manufacturing and healthcare organizations.
Mapped techniques
supply-chain campaign
npm as delivery.
Spearphish lures.