Malicious Packages articles

Original research and analysis on malicious packages in open source registries โ€” attack techniques like typosquatting, plus detection and defense.

A Malicious Package Found Stealing AWS AIM data on npm has Similarities To Capital One Hack - malicious package npm

A Malicious Package Found Stealing AWS AIM data on npm has Similarities To Capital One Hack

Discover how a malicious package found stealing AWS AIM data on npm has similarities to the Capital One hack. Learn about the threat.

Read More
A Malicious Package Found Stealing AWS AIM data on npm has Similarities To Capital One Hack - The Source series

Popular JavaScript Library ua-parser-js Compromised via Account Takeover

Popular JavaScript library ua-parser-js was compromised via account takeover, releasing malicious versions.

Read More