HOW WE HACKED A SOFTWARE SUPPLY CHAIN FOR $50K

Summary from the TLDR InfoSec newsletter

The blog post describes the journey of Lupin with fellow hacker Snorlhax on bug bounties and aiming for “The Exceptional Vulnerability” that would be their big payout worth $50,500. They found a way to backdoor a private npm package, potentially compromising multiple environments and systems, highlighting the importance of securing all aspects of the development process.