
SANS Stormcast Tuesday, January 13th, 2026: n8n got npm’ed; Gogs exploit; telegram proxy links
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
00:00
n8n npm supply-chain credential theft
Johannes explains malicious npm packages targeted n8n users to steal OAuth credentials via fake license validators.
Play episode from 00:25
Transcript


