Intro to Malware Analysis: Analyzing Python Malware
11 minute read time
Understanding malware analysis and the process of researching security vulnerabilities is the first step toward implementing best practices.
Read More...
Developers Need Two Things: The Nexus Platform and a Full Pot of Coffee
5 minute read time
Waiting too long to invest in security is too common. Sonatype's Nexus platform helps orgs protect themselves from known and unknown vulnerabilities.
Read More...
The Magic Behind Over 101,000 Malicious Packages Discovered and Blocked
3 minute read time
A look at how Sonatype software is protecting development teams and software with the industry-leading tools.
Read More...
Arming the Defender Force and Securing the Software Supply Chain: Helping Developers Implement CISA Best Practices - Part 1
4 minute read time
Sonatype's Nexus Platform helps give DevSecOps practitioners the tools they need to help secure the software supply chain against malicious cyber attacks.
Read More...
More Than 200 Cryptomining Packages Flood npm and PyPI Registry
5 minute read time
More than 200 malicious packages have flooded npm and PyPI registries to install cryptominers on Linux hosts.
Read More...
Ransomware in PyPI: Sonatype Spots 'Requests' Typosquats
8 minute read time
Sonatype has spotted multiple typosquats of the popular Python library, 'requests' that contain ransomware scripts.
Read More...
StringJS Typosquat Deploys Discord Infostealer Obfuscated Five Times
4 minute read time
An npm package called 'stringjs_lib' identified by Sonatype this week typosquats the popular npm library 'string' (or StringJS) to ship an obfuscated info-stealer obfuscated not one, five times.
Read More...
This Week in Malware—Show Me Your Secrets!
3 minute read time
These Python packages not only exfiltrate your secrets—AWS credentials and environment variables but rather upload these to a publicly exposed endpoint.
Read More...
This Week in Malware—Killing Windows Defender With an npm Package
3 minute read time
This Week in Malware we discuss a malicious npm package that disables Windows Defender before dropping a trojan, and ongoing dependency confusion findings.
Read More...