Record · corpus.blog/posts/01a0d49d-2999-722a-8ea9-1573daad933b

The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)

Unit 42 · published 15 July 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture

6blogs citing

First cited: 27 Jan 2026
Most recent: 12 Aug 2026
Rank this month: not ranked
Links from this post: 24
Words captured: 8,087

Cited by

Links from this post

Link

Host

"Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack (Updated November 26) Read at the source ↗

unit42.paloaltonetworks.com

https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens

docs.github.com

Threat Brief: Widespread Impact of the Axios Supply Chain Attack Read at the source ↗

unit42.paloaltonetworks.com

https://www.sonatype.com/blog/npm-chalk-and-debug-packages-hit-in-software-supply-chain-attack

sonatype.com

Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure Read at the source ↗

unit42.paloaltonetworks.com

https://www.npmjs.com/package/@bitwarden/cli

npmjs.com

Shai-Hulud: The Third Coming — Bitwarden CLI Backdoored in Latest Supply Chain Campaign Read at the source ↗

ox.security

https://www.google.com/aclk?sa=L&pf=1&ai=DChsSEwjgsIfApIWUAxWrJUQIHQuBJeUYACICCAEQAhoCZHo&co=1&ase=2&gclid=CjwKCAjwhqfPBhBWEiwAZo196ndAdYlfVK3Sg6rIZ1cndEnOLefhrnmU6p8FtKnPi8RNWcFjHQVJuBoCbCYQAvD_BwE&ei=g8DqafHcBLTn5NoPlcn1mAc&cid=CAASWuRo6pi-RMIWtUQUdBbczFzxF7ZtsP-bSGqzJxTSy-t_c4E4FeJjs9I7pR5ZQ16kCEmwMZOtyQ4ZRy8cFKTdFEHOtpVT0YCEC_wpn_-CApZ7WjxP44BYlXYJ9Q&cce=2&category=acrcp_v1_32&sig=AOD64_1ExOo505GP6cCq0zBe3fbdywYT0Q&q&sqi=2&nis=4&adurl=https://checkmarx.com/product/application-security-platform/?utm_source%3Dgoogle%26utm_medium%3Dcpc%26utm_campaign%3DAMS-AD-FY25Q1-Brand-Google-US%26utm_group%3DCheckmarx%26vector_id%3D22072530657%26vector_source%3DGOOGLE%26vector_campaign%3DAMS-AD-FY25Q1-Brand-Google-US%26utm_keyword%3Dcheckmarx%26utm_campaign%3DAMS-AD-FY25Q1-Brand-Google-US%26utm_source%3Dgoogle%26utm_medium%3Dcpc%26utm_term%3Dcheckmarx%26hsa_acc%3D2852355864%26hsa_cam%3D22072530657%26hsa_grp%3D172516267149%26hsa_ad%3D727402369648%26hsa_src%3Dg%26hsa_tgt%3Dkwd-327138679131%26hsa_kw%3Dcheckmarx%26hsa_mt%3De%26hsa_net%3Dadwords%26hsa_ver%3D3%26gad_source%3D1%26gad_campaignid%3D22072530657%26gbraid%3D0AAAAADihu0G1KSiAH4ynARqSy3ClF8LoZ%26gclid%3DCjwKCAjwhqfPBhBWEiwAZo196ndAdYlfVK3Sg6rIZ1cndEnOLefhrnmU6p8FtKnPi8RNWcFjHQVJuBoCbCYQAvD_BwE&ved=2ahUKEwixqoDApIWUAxW0M1kFHZVkHXMQ0Qx6BAgMEAE

google.com

https://docs.paloaltonetworks.com/wildfire

docs.paloaltonetworks.com

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-new-features/url-filtering-features/advanced-url-filtering

docs.paloaltonetworks.com

https://docs.paloaltonetworks.com/dns-security

docs.paloaltonetworks.com

https://www.paloaltonetworks.com/cortex/cloud

paloaltonetworks.com

https://start.paloaltonetworks.com/contact-unit42.html

start.paloaltonetworks.com

https://slsa.dev/spec/v0.1/provenance

slsa.dev

https://bun.com/

bun.com

https://checkmarx.com/blog/checkmarx-security-update-april-22/

checkmarx.com

https://socket.dev/blog/checkmarx-supply-chain-compromise

socket.dev

https://community.bitwarden.com/t/bitwarden-statement-on-checkmarx-supply-chain-incident/96127

community.bitwarden.com

https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management

paloaltonetworks.com

https://docs-cortex.paloaltonetworks.com/r/Cortex-CLOUD/Cortex-Cloud-Runtime-Security-Documentation/Endpoint-protection

docs-cortex.paloaltonetworks.com

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Premium-Documentation/Use-cases

docs-cortex.paloaltonetworks.com

https://www.paloaltonetworks.com/blog/cloud-security/bitwardencli-supply-chain-attack.

paloaltonetworks.com

https://www.koi.ai/product/endpoint

koi.ai

https://www.paloaltonetworks.com/blog/cloud-security/bitwardencli-supply-chain-attack/

paloaltonetworks.com