# How One Developer Took Down the Supply Chain

Page: https://stenobird.com/podcast/hacker-and-the-fed-5741273/how-one-developer-took-down-the-supply-chain
Text version: https://stenobird.com/podcast/hacker-and-the-fed-5741273/how-one-developer-took-down-the-supply-chain.md
Podcast: [Hacker And The Fed](https://stenobird.com/podcast/hacker-and-the-fed-5741273)
Published: 2026-04-09T09:00:00+00:00
Episode link: https://traffic.megaphone.fm/CON4484390968.mp3
Audio file: https://traffic.megaphone.fm/CON4484390968.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/hacker-and-the-fed-5741273/episodes/how-one-developer-took-down-the-supply-chain
Duration seconds: 2827

## Resource

Chris and Hector break down a highly effective North Korean supply chain attack that started with a fake Microsoft Teams update and escalated into full developer compromise. They explore how modern attackers combine social engineering, open source manipulation, and long term access to infiltrate software pipelines. The episode also covers GitHub based attacks, compromised routers at scale, and why simple human pressure remains one of the most powerful tools in cybercrime. Join our Patreon for weekly bonus episodes: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://www.patreon.com/c/hackerandthefed⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Send HATF your questions at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠questions@hackerandthefed.com

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/hacker-and-the-fed-5741273/episodes/how-one-developer-took-down-the-supply-chain/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/hacker-and-the-fed-5741273/how-one-developer-took-down-the-supply-chain.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.