Tag: SILENCELIFT
-

The Podcast Trap: How UNC1069’s AI Deepfakes Are Poisoning the Global npm Registry
What begins as a mundane exchange—an invitation to a podcast or a routine professional briefing—may serve as the preamble to a sophisticated incursion, potentially granting adversaries access to millions of downstream projects. In recent weeks, several maintainers of prominent Node.js libraries have revealed they were targeted by an identical social engineering stratagem. While the Axios…