Skip to content
UNC6426 Exploits npm Supply Chain for AWS Admin Access

UNC6426 Exploits npm Supply Chain for AWS Admin Access

First seen 11 Mar 2026, 09:55 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 16:10 UTC

Hackers identified as UNC6426 have exploited vulnerabilities in the npm supply chain, specifically targeting the nx package, to gain AWS admin access within 72 hours. This incident raises significant concerns for organizations relying on npm packages, as it highlights the potential for rapid exploitation of supply chain vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 183d ago How this analysis works

Timeline

2026-03-11
UNC6426 exploits npm supply chain attack
2026-03-11
AWS admin access gained within 72 hours

More articles in this cluster (3)

Following this threat?

Track Unc6426 and AWS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed