How stolen information stealers are fueling an underground market
9 minute read time
A look at the tactics, techniques, and procedures used to deploy a series of information stealers being uploaded to the PyPI registry.
Read More...
Why developers are becoming the weakest link in supply chain attacks
5 minute read time
As cyber-attacks continue to grow, threat actors have shifted their focus from endpoints and end users to the software supply chain.
Read More...
This Week in Malware — Cryptominers flood npm, PyPI, and more dependency confusion
2 minute read time
This week Sonatype discovered 200+ npm and PyPI packages that are cryptominers, with additional packages comprising dependency confusion PoCs.
Read More...
This Week in Malware — Typosquats in PyPI, dependency confusion packages
2 minute read time
This Week in Malware we discovered 50 packages that are either malicious or dependency confusion attacks.
Read More...