LARGEST SUPPLY CHAIN HACK IN HISTORY ZOMG!!!!111
Links referenced:
https://github.com/advisories/GHSA-8mgj-vmr8-frr6
https://www.linkedin.com/posts/advocatemack_malware-npm-supplychain-activity-7370829639537291264-jxZD/
https://news.ycombinator.com/item?id=45169657&trk=public_post_comment-text
https://npmdiff.dev/simple-swizzle/0.2.2/0.2.3/package/index.js/
https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
https://www.securityalliance.org/news/2025-09-npm-supply-chain
https://x.com/InsiderPhD/status/1965110610972250550
https://x.com/WhichbufferArda/status/1965139425475907774
https://x.com/hackerfantastic/status/19651434915…
Watch on YouTube ↗
(saves to browser)
Playlist
Uploads from John Hammond · John Hammond · 0 of 60
← Previous
Next →
1
![b00t2root CTF: cuz rsa is lub [RSA Cryptography]](https://i.ytimg.com/vi/_lg2AEqRTjg/mqdefault.jpg)
2
![b00t2root19 CTF: Scatter Me [3D Scatter Plots]](https://i.ytimg.com/vi/VjlB1JDW_so/mqdefault.jpg)
3
![b00t2root19 CTF: Genetics [DNA Cryptography]](https://i.ytimg.com/vi/3LwF_LBepOY/mqdefault.jpg)
4
![b00t2root19 CTF: Can You Read Me [Esoteric Languages]](https://i.ytimg.com/vi/c_OcW0gD0MA/mqdefault.jpg)
5
![b00t2root19 CTF: Treasure [GameBoy ROMs]](https://i.ytimg.com/vi/2jdbesUqDRw/mqdefault.jpg)
6
![b00t2root19 CTF: Loopback [PCAP Forensics]](https://i.ytimg.com/vi/qZDIRzaJ-gk/mqdefault.jpg)
7
![b00t2root19 CTF: EasyPHP [PHP Web Exploits]](https://i.ytimg.com/vi/KOy6QFKZFGQ/mqdefault.jpg)
8
![SunshineCTF 2019: WelcomeCrypto [ROT47]](https://i.ytimg.com/vi/1rZvbpRwHb4/mqdefault.jpg)
9
10
11
12
13
14
15
16
17
18
19
20
![HSCTF - Obfuscated JavaScript (JSF**k) [Verbose]](https://i.ytimg.com/vi/ORDc1ILTxqk/mqdefault.jpg)
21
22
23
24
25
26
27
28
29
![SANS GirlsGoCyberStart [01] I suck at CAPTCHA](https://i.ytimg.com/vi/9YHYd15OcZU/mqdefault.jpg)
30
![SANS GirlsGoCyberStart [02] You Sneaky Dog](https://i.ytimg.com/vi/xBfEXtWyrkc/mqdefault.jpg)
31
![SANS GirlsGoCyberStart [03] Crypto Coffee](https://i.ytimg.com/vi/D1AoU4rBLq4/mqdefault.jpg)
32
33
34
35
36
![Windows PowerShell [01] Introduction](https://i.ytimg.com/vi/TUNNmVeyjW0/mqdefault.jpg)
37
38
39
40
41
42
43
44
45
![CVE-2019-14287 SUDO Bug [under 1.8.28]](https://i.ytimg.com/vi/btUf1O7lQmY/mqdefault.jpg)
46
![PicoCTF 2019 [01] Glory of the Garden (Strings Challenge)](https://i.ytimg.com/vi/_TTKoY2FGr0/mqdefault.jpg)
47
![PicoCTF 2019 [02] Inspector (HTML, CSS, JavaScript)](https://i.ytimg.com/vi/wXKIle63Czo/mqdefault.jpg)
48
![PicoCTF 2019 [03] The Numbers (Python Script)](https://i.ytimg.com/vi/-8m0Rq3qUS8/mqdefault.jpg)
49
![PicoCTF 2019 [04] Warmed Up + Bash Script](https://i.ytimg.com/vi/YnPml0skTqY/mqdefault.jpg)
50
51
![PicoCTF 2019 [05] Handy Shellcode (Pwntools)](https://i.ytimg.com/vi/Nn0fUJuQEsk/mqdefault.jpg)
52
![PicoCTF 2019 [06] Practice Run & SSH](https://i.ytimg.com/vi/SQW6N5hyWKY/mqdefault.jpg)
53
![PicoCTF 2019 [07] Unzip, RE & Rot13](https://i.ytimg.com/vi/k5cw1c2VufI/mqdefault.jpg)
54
![PicoCTF 2019 [08] Caesar & Client Side](https://i.ytimg.com/vi/nb3FRfGC87I/mqdefault.jpg)
55
![PicoCTF 2019 [09] Logon & Vaultdoor 1](https://i.ytimg.com/vi/dg0e6_QBP_w/mqdefault.jpg)
56
![PicoCTF 2019 [10] Robots.txt & Metadata](https://i.ytimg.com/vi/vBm_Ds2mmQk/mqdefault.jpg)
57
![PicoCTF 2019 [11] What Lies Within & Extensions](https://i.ytimg.com/vi/pwkhV9QDQr8/mqdefault.jpg)
58
![PicoCTF 2019 [12] Shark On Wire 1](https://i.ytimg.com/vi/sm6do94cvEY/mqdefault.jpg)
59
![PicoCTF 2019 [13] More Client-Side & Flags](https://i.ytimg.com/vi/McNnKdFQBns/mqdefault.jpg)
60
b00t2root CTF: cuz rsa is lub [RSA Cryptography]
John Hammond
b00t2root19 CTF: Scatter Me [3D Scatter Plots]
John Hammond
b00t2root19 CTF: Genetics [DNA Cryptography]
John Hammond
b00t2root19 CTF: Can You Read Me [Esoteric Languages]
John Hammond
b00t2root19 CTF: Treasure [GameBoy ROMs]
John Hammond
b00t2root19 CTF: Loopback [PCAP Forensics]
John Hammond
b00t2root19 CTF: EasyPHP [PHP Web Exploits]
John Hammond
SunshineCTF 2019: WelcomeCrypto [ROT47]
John Hammond
SunshineCTF 2019 | Brainmeat (Esoteric Languages)
John Hammond
SunshineCTF 2019 | CB1 (NATO Phonetic Alphabet)
John Hammond
SunshineCTF 2019 | Return to Mania (PWN) PIE
John Hammond
SunshineCTF 2019: Wrestler Book (Explicit SQL Injection)
John Hammond
SunshineCTF 2019: Wrestler Name Generator (XML XXE)
John Hammond
Python PIL: Recreating LSB in Stegsolve.jar
John Hammond
Checking IP Address in CIDR Subnet w/ Python
John Hammond
Cracking HSRP Passwords w/ John The Ripper
John Hammond
Facebook CTF - SQL Injection with Spaces (Products Manager)
John Hammond
Crypto: Classic RSA with a Twist (ParsonsCTF)
John Hammond
Finding Shared Libraries with LDD (ParsonsCTF)
John Hammond
HSCTF - Obfuscated JavaScript (JSF**k) [Verbose]
John Hammond
HSCTF - Hiding in ZIP Files (LockedUp)
John Hammond
HackTheBox - Help
John Hammond
HSCTF - Hunting Git Commits (Admin Pass)
John Hammond
HSCTF - Python Remote Code Execution (A Simple Conversation)
John Hammond
HSCTF - Hidden UTF-8 Encoding (Real Reversal)
John Hammond
HSCTF - XORing Data (Hidden Flag)
John Hammond
HSCTF - RSA Cryptography (Reverse Search Algorithm)
John Hammond
GOOGLE CTF 2019 HYPE
John Hammond
SANS GirlsGoCyberStart [01] I suck at CAPTCHA
John Hammond
SANS GirlsGoCyberStart [02] You Sneaky Dog
John Hammond
SANS GirlsGoCyberStart [03] Crypto Coffee
John Hammond
BAD USER INTERFACE / UI EXPERIENCE
John Hammond
TECHNICOLOR QR CODE (Prism) InnoCTF 2019
John Hammond
MITRE CTF 2019 HIGHLIGHTS
John Hammond
HACKERS REACT: Bad Hollywood Hacking Scenes
John Hammond
Windows PowerShell [01] Introduction
John Hammond
CSAW'19 - PWN - Ret2libc w/ PWNTOOLS (baby_boi)
John Hammond
BCACTF - LISP "Thspeaking" (with SinisterMatrix!)
John Hammond
BCACTF - Bruteforcing "Basic Pass" (with SinisterMatrix!)
John Hammond
100% OSCP: Offensive Security Certified Professional
John Hammond
BCACTF "For the NIght is Dark" (with SInisterMatrix!)
John Hammond
PicoCTF 2019 HYPE - LIVE NOW!
John Hammond
x86 Assembly: Hello World!
John Hammond
OSCP - Taking Notes & Resources
John Hammond
CVE-2019-14287 SUDO Bug [under 1.8.28]
John Hammond
PicoCTF 2019 [01] Glory of the Garden (Strings Challenge)
John Hammond
PicoCTF 2019 [02] Inspector (HTML, CSS, JavaScript)
John Hammond
PicoCTF 2019 [03] The Numbers (Python Script)
John Hammond
PicoCTF 2019 [04] Warmed Up + Bash Script
John Hammond
templeos.txt.mp4.wav.psd
John Hammond
PicoCTF 2019 [05] Handy Shellcode (Pwntools)
John Hammond
PicoCTF 2019 [06] Practice Run & SSH
John Hammond
PicoCTF 2019 [07] Unzip, RE & Rot13
John Hammond
PicoCTF 2019 [08] Caesar & Client Side
John Hammond
PicoCTF 2019 [09] Logon & Vaultdoor 1
John Hammond
PicoCTF 2019 [10] Robots.txt & Metadata
John Hammond
PicoCTF 2019 [11] What Lies Within & Extensions
John Hammond
PicoCTF 2019 [12] Shark On Wire 1
John Hammond
PicoCTF 2019 [13] More Client-Side & Flags
John Hammond
A Poor Man's Pentest: Automating the Manual - BsidesDE 2019
John Hammond
DeepCamp AI