Schedule a Demo

Malicious Packages articles

Original research and analysis on malicious packages in open source registries — attack techniques like typosquatting, plus detection and defense.

Blog

New Typosquatting Attack on npm Package ’colors’ Using Cross language Technique Explained

Maria Korlotian, Tamir Ben Ari May 12, 2022
Malicious Packages

Discover the latest typosquatting attack on the npm package ‘colors’ using a cross-language technique.

Read More
RubyGems Critical CVE 2022 29176

Impact Analysis: RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover 

Maciej Mensfeld May 10, 2022
Malicious Packages

Impact Analysis of RubyGems Critical CVE-2022-29176 Unauthorized Package Takeover. Learn about the vulnerability, impact assessment, and more

Read More
news AWS target

AWS Targeted by a Package Backfill Attack

Tamir Ben Ari May 1, 2022
Malicious Packages

Discover how AWS was targeted by a malicious package backfill attack, the methods used by attackers, and how to protect against such attacks.

Read More
malicious package npm

A Malicious Package Found Stealing AWS AIM data on npm has Similarities To Capital One Hack

Maciej Mensfeld Feb 2, 2022
Malicious Packages

Discover how a malicious package found stealing AWS AIM data on npm has similarities to the Capital One hack. Learn about the threat.

Read More
The Source series

Popular JavaScript Library ua-parser-js Compromised via Account Takeover

Maciej Mensfeld Oct 22, 2021
Malicious Packages

Popular JavaScript library ua-parser-js was compromised via account takeover, releasing malicious versions.

Read More
Previous
1 2 3 4
Next