---
id: 5679
title: "Supply chain attacks: a new era"
source_domain: osec.io
source_url: "https://osec.io/blog/supply-chain-attacks-a-new-era/"
published_at: "2024-06-10T00:00:00Z"
tags: ["supply-chain", "web3", "npm", "javascript", "sandbox", "lavamoat"]
phying_url: "https://phying.com/item/5679"
lang: en
---

# Supply chain attacks: a new era

## Summary

OtterSec unpacks Lavamoat's Web3 supply-chain defenses — policy files, NPM anti-hijacking, scuttling — and the sneaky bypasses it reported, showing how hard JS ecosystems are to lock down.

## Intelligence Metadata

- **Sources:** osec.io
- **Published:** 2024-06-10T00:00:00Z
- **Original:** https://osec.io/blog/supply-chain-attacks-a-new-era/
- **Phying News:** https://phying.com/item/5679