CyAN Webinar: Malicious Packages – the Danger’s Already in the Build

On Tuesday December 9, CyAN member Karthikeyan Ramdass will present an analysis of the massive 2025 npm supply chain attack (CISA.gov) that used compromised packages to attack numerous online services.

We will learn topics such as how and why did it happen? How could it have been prevented? What lessons did we learn from it?

If we have time, we will open the floor to Q&A.  This event is open to all, including non-CyAN members.

Date:  Tuesday 09 December 2025
Time:  12:00 New York (EST), 14:00 São Paulo (BRT), 17:00 London (GMT/UTC), 18:00 Paris (CET), 21:00 Dubai (GST)
Duration:  1 hour
Meeting link:  https://meet.opentalk.eu/room/53310aa8-5e2d-47ff-bd29-d48c69f2f030?invite=c5cecee9-40fb-47c8-af1b-3caf917917ee

The webinar will be recorded and shared on our YouTube channel2025-12-09 CyAN Webinar (not audio-only podcasts).

We’re trying out a new format; if this is successful, we’ll do more such webinars in the future.  Please feel free to contact me off-list with any questions, and to share the invitation if you know anyone who’d like to join us.

Calendar invite: 2025-12-09 CyAN Webinar