Root Cause

Root Cause

By WizTrue Crime
Download on the App Store

Root Cause episodes

  • Root Cause Episode 1: The Forensic Trail behind the NPM Registry Heist

    🕵️ What happens when the official build pipeline signs off on a malicious payload? On this episode of Root Cause, the cyber true-crime podcast, host Ian Sterling sits down with Wiz Threat Researcher Gili Tikochinski to dissect the Miasma attack on Red Hat's NPM ecosystem.

    On June 1, 2026, security dashboards flared as 30+ official Red Hat packages were republished in rapid waves carrying backdoored pre-install scripts. The attack bypassed pull request reviews using parentless orphaned commits, stolen developer credentials, and hijacked OIDC token permissions, all while stamping the malicious releases with valid SLSA provenance.

    Was this the evolution of Team PCP or a clever copycat exploiting open-source malware? Tune in to follow the forensic trail and discover the single cryptographic slip-up that unmasked the suspect.

    30 min

About Root Cause

From the publisher's feed

Welcome to Root Cause, the cyber true-crime podcast where we go beneath the headlines of modern security incidents to retrace the forensic clues, challenge conventional wisdom, and expose the structural flaws at the heart of our systems.