The LinkedIn Supply Chain Trap: Stolen Identities and Hidden npm Backdoors

This article reveals a coordinated supply chain attack using stolen LinkedIn and GitHub identities to distribute npm backdoors disguised as code review requests. By exploiting the npm prepare script's automatic execution during install, attackers bypassed developer skepticism and triggered malicious payloads at a critical moment in the development workflow. The incident underscores the growing risk of social engineering combined with technical deception in open-source pipelines and highlights the need for better verification mechanisms in recruitment processes.