This Week in Malware - 135 packages target npm and PyPI registries
3 minute read time
This week in malware, we discovered and analyzed 135 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
This Week in Malware - Over five dozen more packages discovered
2 minute read time
This week in malware we discovered and analyzed over five dozen packages flagged as malicious, suspicious, or dependency confusion attacks.
Read More...
This Week in Malware - Almost 100 packages
2 minute read time
This week in malware Sonatype discovered and analyzed over seven dozen packages flagged as malicious, suspicious, or dependency confusion attacks.
Read More...
This Week in Malware—Ongoing Dependency Confusion
4 minute read time
This week in malware, Sonatype's automated malware detection systems have spotted over four dozen dependency confusion candidates.
Read More...
This Week in Malware - A PyPI phishing follow-up plus 120 packages
4 minute read time
This week Sonatype discovered and analyzed 120 packages flagged as malicious, suspicious, or dependency confusion attacks.
Read More...
Why developers are becoming the weakest link in supply chain attacks
5 minute read time
As cyber-attacks continue to grow, threat actors have shifted their focus from endpoints and end users to the software supply chain.
Read More...
This Week in Malware - 450 packages and a phishing campaign against PyPI maintainers
6 minute read time
This week Sonatype discovered and analyzed 450 packages flagged as malicious, suspicious, or dependency confusion attacks.
Read More...
This Week in Malware — Cryptominers flood npm, PyPI, and more dependency confusion
2 minute read time
This week Sonatype discovered 200+ npm and PyPI packages that are cryptominers, with additional packages comprising dependency confusion PoCs.
Read More...
More than 200 cryptomining packages flood npm and PyPI registry
5 minute read time
More than 200 malicious packages have flooded npm and PyPI registries to install cryptominers on Linux hosts.
Read More...