How Stolen Information Stealers are Fueling an Underground Market
9 minute read time
A look at the tactics, techniques, and procedures used to deploy a series of information stealers being uploaded to the PyPI registry.
Read More...
Why Developers are Becoming the Weakest Link in Supply Chain Attacks
5 minute read time
As cyber-attacks continue to grow, threat actors have shifted their focus from endpoints and end users to the software supply chain.
Read More...
This Week in Malware— Cryptominers Flood npm, PyPI, and More Dependency Confusion
2 minute read time
This week Sonatype discovered 200+ npm and PyPI packages that are cryptominers, with additional packages comprising dependency confusion PoCs.
Read More...
This Week in Malware—Typosquats in PyPI, Dependency Confusion Packages
2 minute read time
This Week in Malware we discovered 50 packages that are either malicious or dependency confusion attacks.
Read More...