Malicious Packages Blog: Threats & Research

What are Malicious Packages? How Do They Work?

Carol Hildebrand May 9, 2023

Malicious Packages

Learn about malicious packages and the growing threat they pose to software supply chains.

What are Malicious Packages? How Do They Work? - blog 2 1

Deceptive ‘Vibranced’ npm Package Discovered Masquerading as Popular ‘Colors’ Package

Tom Abai Apr 17, 2023

Malicious Packages

Discover the threat of the 'Vibranced' npm package masquerading as 'Colors'. Learn about its stages of execution, obfuscation techniques.

Yandex Data Leak Triggers Malicious Package Publication

Tamir Ben Ari Jan 30, 2023

Malicious Packages

Discover how the Yandex data leak triggered malicious package publication, leading to supply chain security risks.

What are Malicious Packages? How Do They Work? - blog image

Malicious Code Deletes Directories If You Do Not Have a License

Tamir Ben Ari Jan 10, 2023

Malicious Packages

Discover how malicious code can delete directories if you don't have a license. Learn about supply chain security and license compliance.

What are Malicious Packages? How Do They Work? - blog RubyGems vulnerabilities

To use rest_client, or to use rest-client, that is the question

Maria Korlotian Oct 18, 2022

Malicious Packages

Discover the risks of using rest_client versus rest-client in RubyGems. Learn how a recent attack was thwarted.

What are Malicious Packages? How Do They Work? - npm Massive Dependency Confusion Attack

Cybercriminals targeted users of packages with a total of 1.5 billion weekly downloads on npm

Maciej Mensfeld Oct 2, 2022

Malicious Packages

Stay informed about the latest supply chain security incident targeting npm users. Learn about the malicious packages and more.

Popular Cryptocurrency Exchange dYdX Has Had Its NPM Account Hacked

Maciej Mensfeld Sep 23, 2022

Malicious Packages

dYdX, a popular cryptocurrency exchange, had its NPM account hacked in a supply chain attack. Learn how to protect against similar attacks.

What are Malicious Packages? How Do They Work? - php 1

Typosquatting Malware Found in Composer Repository

Guy Bar-Gil Aug 22, 2022

Malicious Packages

Protect your PHP applications from typosquatting malware found in Composer Repository. Learn how attackers exploit vulnerabilities.

What are Malicious Packages? How Do They Work? - Todays Security Tidbit An Encrypted JSON File Containings Malicious Code

Today’s Security Tidbit: An Encrypted JSON File Containing Malicious Code

Tamir Ben Ari Aug 2, 2022

Malicious Packages

Discover how encrypted JSON files are being used to hide malicious code. Learn about the latest security findings and how to protect your apps.

How to Conquer Remote Code Execution (RCE) in npm

Maciej Mensfeld Jul 19, 2022

Malicious Packages

Learn how to conquer Remote Code Execution (RCE) attacks in npm. Find out why npm is susceptible, the threats of RCE, and more.

Single Author Uploaded 168 Packages to npm as Part of a Massive Dependency Confusion Attack

Tamir Ben Ari Jun 20, 2022

Malicious Packages

Discover how a single author uploaded 168 malicious npm packages in a dependency confusion attack. Learn how Mend blocked these threats.

What are Malicious Packages? How Do They Work? - Blog

New Typosquatting Attack on npm Package ’colors’ Using Cross language Technique Explained

Maria Korlotian, Tamir Ben Ari May 12, 2022

Malicious Packages

Discover the latest typosquatting attack on the npm package 'colors' using a cross-language technique.

What are Malicious Packages? How Do They Work? - RubyGems Critical CVE 2022 29176

Impact Analysis: RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover

Maciej Mensfeld May 10, 2022

Malicious Packages

Impact Analysis of RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover. Learn about the vulnerability, impact assessment, and more

What are Malicious Packages? How Do They Work? - news AWS target

AWS Targeted by a Package Backfill Attack

Tamir Ben Ari May 1, 2022

Malicious Packages

Discover how AWS was targeted by a malicious package backfill attack, the methods used by attackers, and how to protect against such attacks.

What are Malicious Packages? How Do They Work? - malicious package npm

A Malicious Package Found Stealing AWS AIM data on npm has Similarities To Capital One Hack

Maciej Mensfeld Feb 2, 2022

Malicious Packages

Discover how a malicious package found stealing AWS AIM data on npm has similarities to the Capital One hack. Learn about the threat.

What are Malicious Packages? How Do They Work? - The Source series

Popular JavaScript Library ua-parser-js Compromised via Account Takeover

Maciej Mensfeld Oct 22, 2021

Malicious Packages

Popular JavaScript library ua-parser-js was compromised via account takeover, releasing malicious versions.

Mend.io Malicious Packages