Malicious Packages articles

Original research and analysis on malicious packages in open source registries โ€” attack techniques like typosquatting, plus detection and defense.

Popular JavaScript Library ua-parser-js Compromised via Account Takeover - The Source series

Popular JavaScript Library ua-parser-js Compromised via Account Takeover

Popular JavaScript library ua-parser-js was compromised via account takeover, releasing malicious versions.

Read More