More than 200 cryptomining packages flood npm and PyPI registry
5 minute read time
More than 200 malicious packages have flooded npm and PyPI registries to install cryptominers on Linux hosts.
Read More...
Wicked Good Development Episode 13: Hacks and Ax, July edition
13 minute read time
Ax Sharma, a security researcher at Sonatype and tech journalist, joins Kadi and Omar for his monthly update on protestware and ransomware.
Read More...
StringJS typosquat deploys Discord infostealer obfuscated five times
4 minute read time
An npm package called 'stringjs_lib' identified by Sonatype this week typosquats the popular npm library 'string' (or StringJS) to ship an obfuscated.
Read More...
This Week in Malware — John Deere dependency confusion attempt and more
2 minute read time
We discovered and analyzed 17 packages, at least a dozen of which were dependency confusion PoCs directly targeting the agricultural equipment giant John Deere.
Read More...
John Deere dependency confusion attempt flagged by Sonatype
3 minute read time
Sonatype identified 17 npm packages, at least 12 of which directly target John Deere's private npm dependencies via dependency confusion, a technique that.
Read More...
This Week in Malware — July 15th edition
2 minute read time
This Week in Malware we identified over 34 npm and PyPI packages that are either dependency confusion candidates, prank packages, contain PoC reverse shell.
Read More...
This Week in Malware — Python cryptominers, 345 dependency confusion packages
16 minute read time
This week's highlights include a PyPI typosquat that drops a cryptominer and AWS credential stealer, along with an influx of 345 dependency confusion packages.
Read More...
This Week in Malware — Killing Windows Defender with an npm package
3 minute read time
This Week in Malware we discuss a malicious npm package that disables Windows Defender before dropping a trojan, and ongoing dependency confusion findings.
Read More...
npm package disables Windows Defender before dropping Trojan
3 minute read time
npm package 'flame-vali' makes multiple attempts to disable Windows Defender on the infected system before downloading a cryptominer.
Read More...