---
id: 2433
title: "Why EDR and proxy won’t save you from supply chain malware"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/edr-proxy-wont-protect-supply-chain-malware"
published_at: "2026-06-02 00:00"
tags: ["supply-chain", "malware", "npm", "pypi", "detection", "supply-chain-security", "edr"]
phying_url: "https://phying.com/item/2433"
lang: en
---

# Why EDR and proxy won’t save you from supply chain malware

## Summary

Supply chain malware gets invited: it runs inside trusted runtimes doing what they do every day. That's why EDR sees nothing anomalous in cases like the axios hijack—and why proxies miss it too.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-06-02 00:00
- **Original:** https://www.aikido.dev/blog/edr-proxy-wont-protect-supply-chain-malware
- **Phying News:** https://phying.com/item/2433