• Platform
    What’s driving the adoption of sboms? What’s next for them? - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    What’s driving the adoption of sboms? What’s next for them? - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    What’s driving the adoption of sboms? What’s next for them? - ai
    Mend AI Secure AI powered applications
    What’s driving the adoption of sboms? What’s next for them? - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    What’s driving the adoption of sboms? What’s next for them? - dast icon 1 DAST What’s driving the adoption of sboms? What’s next for them? - apis icon 1 API security What’s driving the adoption of sboms? What’s next for them? - eol icon EOL support
    Platform Benefits
    What’s driving the adoption of sboms? What’s next for them? - repoi icon Repo integration Scalability-icon Scalability What’s driving the adoption of sboms? What’s next for them? - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    What’s driving the adoption of sboms? What’s next for them? - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    What’s driving the adoption of sboms? What’s next for them? - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    What’s driving the adoption of sboms? What’s next for them? - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    What’s driving the adoption of sboms? What’s next for them? - red teaming guide featured image
    AI Red Teaming Practical Guide
    What’s driving the adoption of sboms? What’s next for them? - featured image
    A CISO’s Guide to Securing AI from the Start
    What’s driving the adoption of sboms? What’s next for them? - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
    What’s driving the adoption of sboms? What’s next for them? - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo

Mend.io Malicious Packages

What’s Driving the Adoption of SBOMs? What’s Next for Them? - whats driving the adoption of sboms and whats

What’s Driving the Adoption of SBOMs? What’s Next for Them?

Jeff Martin Jun 1, 2023
SBOM

Discover what's driving the adoption of SBOMs and what's next for them in terms of malicious packages and supply chain security.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - unseen risks of open source dependencies case of an abandoned name e1685538190274

The Unseen Risks of Open Source Dependencies: The Case of an Abandoned Name

Tamir Ben Ari, Tom Abai May 31, 2023
Dependency Updates

Mend.io research discovered a threat actor takeover of the name ‘gemnasium-gitlab-service', a retired Ruby gem with two million+ downloads.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - what are malicious packages blog post

What are Malicious Packages? How Do They Work?

Carol Hildebrand May 9, 2023
Malicious Packages

Learn about malicious packages and the growing threat they pose to software supply chains.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - blog 2 1

Deceptive ‘Vibranced’ npm Package Discovered Masquerading as Popular ‘Colors’ Package

Tom Abai Apr 17, 2023
Malicious Packages

Discover the threat of the 'Vibranced' npm package masquerading as 'Colors'. Learn about its stages of execution, obfuscation techniques.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - Yandex Data Leak Triggers Malicious Package Publication 1

Yandex Data Leak Triggers Malicious Package Publication

Tamir Ben Ari Jan 30, 2023
Malicious Packages

Discover how the Yandex data leak triggered malicious package publication, leading to supply chain security risks.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - blog image

Malicious Code Deletes Directories If You Do Not Have a License

Tamir Ben Ari Jan 10, 2023
Malicious Packages

Discover how malicious code can delete directories if you don't have a license. Learn about supply chain security and license compliance.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - blog RubyGems vulnerabilities

To use rest_client, or to use rest-client, that is the question

Maria Korlotian Oct 18, 2022
Malicious Packages

Discover the risks of using rest_client versus rest-client in RubyGems. Learn how a recent attack was thwarted.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - npm Massive Dependency Confusion Attack

Cybercriminals targeted users of packages with a total of 1.5 billion weekly downloads on npm

Maciej Mensfeld Oct 2, 2022
Malicious Packages

Stay informed about the latest supply chain security incident targeting npm users. Learn about the malicious packages and more.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - npm Massive Dependency Confusion Attack

Popular Cryptocurrency Exchange dYdX Has Had Its NPM Account Hacked

Maciej Mensfeld Sep 23, 2022
Malicious Packages

dYdX, a popular cryptocurrency exchange, had its NPM account hacked in a supply chain attack. Learn how to protect against similar attacks.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - Todays Security Tidbit An Encrypted JSON File Containings Malicious Code

Today’s Security Tidbit: An Encrypted JSON File Containing Malicious Code

Tamir Ben Ari Aug 2, 2022
Malicious Packages

Discover how encrypted JSON files are being used to hide malicious code. Learn about the latest security findings and how to protect your apps.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - How to Conquer Remote Code Execution RCE in npm

How to Conquer Remote Code Execution (RCE) in npm

Maciej Mensfeld Jul 19, 2022
Malicious Packages

Learn how to conquer Remote Code Execution (RCE) attacks in npm. Find out why npm is susceptible, the threats of RCE, and more.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - blog blog image

3 Critical Best Practices of Software Supply Chain Security

Tiffany Jennings Jun 20, 2022
Software Supply Chain

Learn about the 3 critical best practices of software supply chain security to protect your organization from malicious packages.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - Blog

New Typosquatting Attack on npm Package ’colors’ Using Cross language Technique Explained

Maria Korlotian, Tamir Ben Ari May 12, 2022
Malicious Packages

Discover the latest typosquatting attack on the npm package 'colors' using a cross-language technique.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - RubyGems Critical CVE 2022 29176

Impact Analysis: RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover 

Maciej Mensfeld May 10, 2022
Malicious Packages

Impact Analysis of RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover. Learn about the vulnerability, impact assessment, and more

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - malicious package npm

A Malicious Package Found Stealing AWS AIM data on npm has Similarities To Capital One Hack

Maciej Mensfeld Feb 2, 2022
Malicious Packages

Discover how a malicious package found stealing AWS AIM data on npm has similarities to the Capital One hack. Learn about the threat.

Read More
What’s Driving the Adoption of SBOMs? What’s Next for Them? - diffend

Welcome to Mend, Diffend!

Rhys Arkins Apr 20, 2021
Malicious Packages

Mend welcomes Diffend, an innovative software supply chain security service, to improve open source risk management.

Read More
Previous
1 2
Next

© 2026 Mend.io (White Source Ltd.) All rights reserved.

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report