by Jesper Kråkhede, Sweden
Posted in Security Architecture, Technology on Sep 17th, 2025
This month a self replicating worm spread through the npm ecosystem, the package registry used by most JavaScript developers. It stole credentials from developers´ machines, including tokens for npm and GitHub and keys for cloud services. Then it used the stolen npm tokens to publish infected versions of other packages owned by the same developers. […]
Active Directory AI AI agents AI governance Automation Business Cloud security Compliance Cost Credential Theft Data protection Detection Device management Governance Identity Incident response Information classification Legacy Logging Methodology Microsoft Microsoft Defender Microsoft Digital Defense Report Microsoft Sentinel Organisation OT Patching PAW Personal Privileged access Ransomware Remote access Remote work Risk management Security Architecture Security strategy Service Providers SOC SPA Statistics Supply chain Threat intelligence VPN Vulnerabilities Zero Trust