Latest / The Secure Disclosure
The Largest Breach That Wasn’t: Debug & Chalk + NPM’s Almost-Apocalypse
This week on The Secure Disclosure, host Mackenzie Jackson dives into “the largest breach that never really happened” the September npm supply chain compromise that put 2.6 billion weekly downloads at risk but somehow didn’t take down the internet.Joining me are two key voices from the incident:Josh Junon – the maintainer who was phished, unknowingly triggering the chain of events.Charlie Erikson – the security researcher who first discovered and analyzed the malware.Together, we unpack the timeline: the phishing email that started it all, the malware hidden inside foundational packages like…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.