---
id: 5670
title: "How to survive supply-chain attacks"
source_domain: osec.io
source_url: "https://osec.io/blog/how-to-survive-supply-chain-attacks/"
published_at: "2025-09-13T12:00:00Z"
tags: ["supply-chain", "malware", "cryptocurrency", "npm", "javascript", "lavamoat"]
phying_url: "https://phying.com/item/5670"
lang: en
---

# How to survive supply-chain attacks

## Summary

OtterSec breaks down the NPM supply-chain attack that shipped malware in packages like chalk to steal crypto — intercepting wallet requests — plus defenses such as Lavamoat.

## Intelligence Metadata

- **Sources:** osec.io
- **Published:** 2025-09-13T12:00:00Z
- **Original:** https://osec.io/blog/how-to-survive-supply-chain-attacks/
- **Phying News:** https://phying.com/item/5670