The npm Threat Landscape: Attack Surface and Mitigations

Unit 42 published multiple research posts covering elevated threats across supply chains, cloud/A I platforms, IoT, and wireless. Key findings include: evolution of npm supply-chain attacks with wormable malware and CI/CD persistence; active regional activity by threat cluster TGR-STA-1030; frontier AI enabling autonomous multi-stage/cloud attacks and faster vulnerability discovery; Wi‑Fi AirSnitch attacks that bypass WPA2/3 and client isolation; exploitation attempts against TP‑Link routers via CVE-2023-33538 with Mirai-like payloads; critical weaknesses in Amazon Bedrock AgentCore (overpriv­