How Harden Runner Detected the Sha1-Hulud Supply Chain Attack in CNCF's Backstage Repository

Case study documenting how Harden Runner security tool detected the Sha1-Hulud supply chain attack targeting CNCF's Backstage repository through npm package compromise. The attack demonstrates advanced supply chain compromise techniques targeting popular open source projects. Harden Runner used runtime monitoring and baseline anomaly detection to identify malicious behavior patterns. The detection showcases the importance of runtime security monitoring in CI/CD pipelines. This represents a significant supply chain security incident affecting critical infrastructure projects.