# Maintainer Compromise: The Next Supply-Chain Attack Vector in 2026

Page: https://stenobird.com/podcast/shadowtalk-powered-by-reliaquest-61547/maintainer-compromise-the-next-supply-chain-attack-vector-in-2026
Text version: https://stenobird.com/podcast/shadowtalk-powered-by-reliaquest-61547/maintainer-compromise-the-next-supply-chain-attack-vector-in-2026.md
Podcast: [ShadowTalk: Powered by ReliaQuest](https://stenobird.com/podcast/shadowtalk-powered-by-reliaquest-61547)
Published: 2026-01-21T18:00:00+00:00
Episode link: https://www.buzzsprout.com/2154459/episodes/18547651-maintainer-compromise-the-next-supply-chain-attack-vector-in-2026.mp3
Audio file: https://www.buzzsprout.com/2154459/episodes/18547651-maintainer-compromise-the-next-supply-chain-attack-vector-in-2026.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/shadowtalk-powered-by-reliaquest-61547/episodes/maintainer-compromise-the-next-supply-chain-attack-vector-in-2026
Duration seconds: 1632

## Resource

Resources: https://linktr.ee/ReliaQuestShadowTalk Join hosts Brandon and John as they discuss: How supply-chain attacks evolvedCampaigns targeting NPM package maintainersActionable defense strategiesBrandon Tirado: Director of Threat Research for ReliaQuest. A skilled cyber defense professional with a unique combination of management and hands-on experience. With a deep understanding of adversary motives and the tactics, techniques, and procedures (TTPs) they use to achieve their goals, Brand...

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/shadowtalk-powered-by-reliaquest-61547/episodes/maintainer-compromise-the-next-supply-chain-attack-vector-in-2026/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/shadowtalk-powered-by-reliaquest-61547/maintainer-compromise-the-next-supply-chain-attack-vector-in-2026.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.