Mend.io Malicious Packages

Learn how to protect your code from malicious packages with these eight considerations. Stay ahead of supply chain security threats.

Learn how to stop software supply chain attacks with SBOMs, best practices, and prioritizing known vulnerabilities. Protect your software.

Discover the latest threat in town - a new info-stealer variant using Electron to remain undetected. Learn about its attack flow.

Learn about the risks of brandjacking & how to overcome them with application security tools & practices. Protect your org from cyber threats.

Find out what typosquatting is, why it is such a threat, and what you can do to stop it.

Learn how SLSA enhances software supply chain security with levels of protection. Understand the risks, benefits, and best practices.

Learn to protect your applications from malicious packages with our guide. Understand the anatomy of attacks and how to prevent them.

Discover what's driving the adoption of SBOMs and what's next for them in terms of malicious packages and supply chain security.

Mend.io research discovered a threat actor takeover of the name ‘gemnasium-gitlab-service', a retired Ruby gem with two million+ downloads.

Learn about malicious packages and the growing threat they pose to software supply chains.

Discover the threat of the 'Vibranced' npm package masquerading as 'Colors'. Learn about its stages of execution, obfuscation techniques.

Discover how the Yandex data leak triggered malicious package publication, leading to supply chain security risks.

Discover how malicious code can delete directories if you don't have a license. Learn about supply chain security and license compliance.

Discover the risks of using rest_client versus rest-client in RubyGems. Learn how a recent attack was thwarted.

Stay informed about the latest supply chain security incident targeting npm users. Learn about the malicious packages and more.

dYdX, a popular cryptocurrency exchange, had its NPM account hacked in a supply chain attack. Learn how to protect against similar attacks.