A routine software update. No phishing. No sketchy download. Then a security team finds the unthinkable: trusted code has been hijacked, and the breach rode in through the exact channels engineers rely on every day. I walk through the supply chain attacks that piled up across April and May 2026, including poisoned open source packages tied to TanStack and trojanized Daemon Tools installers, plus the rapid-fire abuse of major software registries like NPM, PyPI, and Docker Hub. The most ...
Podzilla Summary coming soon
Sign up to get notified when the full AI-powered summary is ready.
Free forever for up to 3 podcasts. No credit card required.
Listen to This Episode
More from Plaintext with Rich
North Korea Mastra NPM Supply Chain Attack: How It Works
Patch Tuesday 206 Vulnerabilities: AI Discovery vs Remediation Speed
Instagram AI Takeover: How Attackers Exploited Meta Support Bots
FortiBleed: When Your Firewall Becomes the Front Door
Get summaries like this every morning.
Free AI-powered recaps of Plaintext with Rich and your other favorite podcasts, delivered to your inbox.
Free forever for up to 3 podcasts. No credit card required.