Why EDR and proxy won’t save you from supply chain malware
aikido.dev | blog | #supply-chain | #malware | #npm | #pypi | #detection | #supply-chain-security | #edr
Summary
Supply chain malware gets invited: it runs inside trusted runtimes doing what they do every day. That's why EDR sees nothing anomalous in cases like the axios hijack—and why proxies miss it too.
- Published
- Collected
--- id: 2433 title: "Why EDR and proxy won’t save you from supply chain malware" source_domain: aikido.dev source_url: "https://www.aikido.dev/blog/edr-proxy-wont-protect-supply-chain-malware" published_at: "2026-06-02 00:00" tags: ["supply-chain", "malware", "npm", "pypi", "detection", "supply-chain-security", "edr"] phying_url: "https://phying.com/item/2433" lang: en --- # Why EDR and proxy won’t save you from supply chain malware ## Summary Supply chain malware gets invited: it runs inside trusted runtimes doing what they do every day. That's why EDR sees nothing anomalous in cases like the axios hijack—and why proxies miss it too. ## Intelligence Metadata - **Sources:** aikido.dev - **Published:** 2026-06-02 00:00 - **Original:** https://www.aikido.dev/blog/edr-proxy-wont-protect-supply-chain-malware - **Phying News:** https://phying.com/item/2433