Schedule a Demo

Malicious Packages articles

Original research and analysis on malicious packages in open source registries — attack techniques like typosquatting, plus detection and defense.

theres a new stealer variant in town and its using electron to stay fully undetected

There’s a New Stealer Variant in Town, and It’s Using Electron to Stay Fully Undetected

Tom Abai Aug 10, 2023
Malicious Packages

Discover the latest threat in town – a new info-stealer variant using Electron to remain undetected. Learn about its attack flow.

Read More
brandjacking

What Risks Do You Run from Brandjacking, and How Do You Overcome Them?

Tiffany Jennings Aug 1, 2023
Malicious Packages

Learn about the risks of brandjacking & how to overcome them with application security tools & practices. Protect your org from cyber threats.

Read More
cybersecurity risks posed by typosquatting and how you can beat them

What Cybersecurity Risks Does Typosquatting Pose, and How Can You Beat Them?

Tiffany Jennings Jul 27, 2023
Malicious Packages

Find out what typosquatting is, why it is such a threat, and what you can do to stop it.

Read More
understanding the anatomy of a malicious package attack

Understanding the Anatomy of a Malicious Package Attack

Jeff Martin Jun 13, 2023
Malicious Packages

Learn to protect your applications from malicious packages with our guide. Understand the anatomy of attacks and how to prevent them.

Read More
unseen risks of open source dependencies case of an abandoned name e1685538190274

The Unseen Risks of Open Source Dependencies: The Case of an Abandoned Name

Tamir Ben Ari, Tom Abai May 31, 2023
Malicious Packages

Mend.io research discovered a threat actor takeover of the name ‘gemnasium-gitlab-service’, a retired Ruby gem with two million+ downloads.

Read More
what are malicious packages blog post

What are Malicious Packages? How Do They Work?

Carol Hildebrand May 9, 2023
Malicious Packages

Learn about malicious packages and the growing threat they pose to software supply chains.

Read More
blog 2 1

Deceptive ‘Vibranced’ npm Package Discovered Masquerading as Popular ‘Colors’ Package

Tom Abai Apr 17, 2023
Malicious Packages

Discover the threat of the ‘Vibranced’ npm package masquerading as ‘Colors’. Learn about its stages of execution, obfuscation techniques.

Read More
Yandex Data Leak Triggers Malicious Package Publication 1

Yandex Data Leak Triggers Malicious Package Publication

Tamir Ben Ari Jan 30, 2023
Malicious Packages

Discover how the Yandex data leak triggered malicious package publication, leading to supply chain security risks.

Read More
blog image

Malicious Code Deletes Directories If You Do Not Have a License

Tamir Ben Ari Jan 10, 2023
Malicious Packages

Discover how malicious code can delete directories if you don’t have a license. Learn about supply chain security and license compliance.

Read More
blog RubyGems vulnerabilities

To use rest_client, or to use rest-client, that is the question

Maria Korlotian Oct 18, 2022
Malicious Packages

Discover the risks of using rest_client versus rest-client in RubyGems. Learn how a recent attack was thwarted.

Read More
npm Massive Dependency Confusion Attack

Cybercriminals targeted users of packages with a total of 1.5 billion weekly downloads on npm

Maciej Mensfeld Oct 2, 2022
Malicious Packages

Stay informed about the latest supply chain security incident targeting npm users. Learn about the malicious packages and more.

Read More
npm Massive Dependency Confusion Attack

Popular Cryptocurrency Exchange dYdX Has Had Its NPM Account Hacked

Maciej Mensfeld Sep 23, 2022
Malicious Packages

dYdX, a popular cryptocurrency exchange, had its NPM account hacked in a supply chain attack. Learn how to protect against similar attacks.

Read More
php 1

Typosquatting Malware Found in Composer Repository

Guy Bar-Gil Aug 22, 2022
Malicious Packages

Protect your PHP applications from typosquatting malware found in Composer Repository. Learn how attackers exploit vulnerabilities.

Read More
Todays Security Tidbit An Encrypted JSON File Containings Malicious Code

Today’s Security Tidbit: An Encrypted JSON File Containing Malicious Code

Tamir Ben Ari Aug 2, 2022
Malicious Packages

Discover how encrypted JSON files are being used to hide malicious code. Learn about the latest security findings and how to protect your apps.

Read More
How to Conquer Remote Code Execution RCE in npm

How to Conquer Remote Code Execution (RCE) in npm

Maciej Mensfeld Jul 19, 2022
Malicious Packages

Learn how to conquer Remote Code Execution (RCE) attacks in npm. Find out why npm is susceptible, the threats of RCE, and more.

Read More
npm Massive Dependency Confusion Attack

Single Author Uploaded 168 Packages to npm as Part of a Massive Dependency Confusion Attack

Tamir Ben Ari Jun 20, 2022
Malicious Packages

Discover how a single author uploaded 168 malicious npm packages in a dependency confusion attack. Learn how Mend blocked these threats.

Read More
Previous
1 2 3 4
Next