Most security incidents map onto an existing budget line. This one does not. The compromise Upwind Security was first to report did not exploit a vulnerability, defeat a control, or breach a perimeter.
Source: [HackerNoon](https://hackernoon.com/upwind-first-to-detect-one-of-the-most-deceptive-npm-compromises-yet-recorded?source=rss)