Michael Koczwara

Jan 3

5 min read

LetsDefend: Hijacked NPM Package/Supply Chain Compromise

Hijacked NPM walkthrough

Preparation

Alert SOC158: Hijacked NPM Malware

Everything looks legit when I do the checks. UA Parser JS has been downloaded from its official site. I couldn't understand what is the problem.

--

--

--

More from Michael Koczwara

Security Researcher [RED&BLUE]

Love podcasts or audiobooks? Learn on the go with our new app.

Try Knowable

Recommended from Medium

Suresh Sundaram

Wireless Hacking — Part9

Wiliam Sloan

Cybersecurity reporter Nicole Perlroth warns against cybersecurity complacency

Hynda Chobot

{UPDATE} Mille Bornes Avenue Hack Free Resources Generator

Veselin Pizurica

A New Approach to Fraud Credit Card Transaction Prevention

GokuMarket Exchange

in

GokuMarket

Winners Announcement: MKX Airdrop Event 🪂

Jawad Saqib

Remote Exploitation 101-Root The Box

Sreekanth

How I Hacked & Reported Data Leak of 7 Million Users & Distributor’s Bank Details to Indane, IOCL

Kamran Saifullah

Windows Command Shell — Leveraging CMD To Execute Sneaky Stuff

AboutHelpTermsPrivacy

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Michael Koczwara

Michael Koczwara

Security Researcher [RED&BLUE]

More from Medium

Michael Koczwara

Attack Analysis — Cobalt Strike C2 & Hancitor/Malware

Chad Warner

Cyber Kill Chain in Cyber Threat Intelligence

Richard de Vries

in

Tales from a Security Professional

How can you recognize a crypto-miner in your environment?

A crypto mining farm
Cyborg Security

Critical CVEs: Why Chasing Squirrels is Driving the Whole Industry Nuts

Help

Status

Writers

Blog

Careers

Privacy

Terms

About

Knowable