UNC6426 used stolen GitHub tokens from the 2025 nx npm breach to gain AWS admin access in under 72 hours, enabling data theft and cloud destruction.
Hackers exploited a compromised npm package to breach cloud systems and gain full AWS administrator access within 72 hours.