SEC536: Adversarial AI - Penetration Testing AI Systems
SEC536Offensive Operations, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Poisoned Packages & Stolen Secrets: The Rise of Supply Chain Attacks
Software supply chain attacks have surged in 2026, with threat actors increasingly targeting the trusted packages, repositories, and CI/CD workflows developers rely on every day. Recent campaigns linked to TeamPCP and Mini Shai-Hulud demonstrate how a single compromised maintainer account, package, or build pipeline can quickly spread across npm, PyPI, GitHub, cloud environments, and downstream enterprise users.
In this episode of STAR, we'll examine major software supply chain compromises, including the AntV npm incident, Megalodon-style GitHub backdooring, and other recent campaigns. We'll walk through the TeamPCP attack chain to uncover how attackers steal secrets, compromise build systems, abuse trust mechanisms, and expand access across the software ecosystem.
SANS Threat Analysis Rundown in Review: Identity, Geopolitics, and a Passing of the Torch
Identity-based attacks, geopolitical cyber risks, and CTI best practices take center stage in this SANS Threat Analysis Rundown recap. Explore key 2026 threat trends and actionable intelligence for defenders, analysts, and security leaders.
Blog
