Topics

Sign in Subscribe

cybersecurity / google / Mandiant / AWS / cloud security

Hackers turned a compromised npm package into full AWS admin access in 72 hours

Hackers "enumerated and accessed objects within S3 buckets, terminated production EC2 and RDS instances, and decrypted application keys."

By Kiera Fields

Mar 17, 2026 10:29 AM 2 min read

Hackers turned a compromised npm package into full AWS admin access in 72 hours — Image credit: https://unsplash.com/@indiratjokorda

This content is for members only

Subscribe

Already have an account? Sign in

Add The Stack on Google

Kiera Fields

Kiera Fields is a News Editor who joins The Stack. She writes about leadership, tech and business, covering everything from earnings calls to C-suite interviews.