SourceCodeRed · Scour

“IndonesianFoods” worm publishes more than 64,000 malicious NPM packages

sourcecodered.com·27w

FIRST CTI Conference Talk: Integrating Software Supply Chain Intel into Enterprise CTI

sourcecodered.com·34w

EXPOSED! Thousands of public software packages expose sensitive data

sourcecodered.com·39w

Thousands of public NPM packages expose credentials and sensitive data

sourcecodered.com·39w

Why SCA sucks (at detecting malicious packages)

sourcecodered.com·43w

How do malicious software packages get identified and taken down?

sourcecodered.com·43w

NPM package targets web3 smart contracts with new malware

sourcecodered.com·65w

NPM package targeting crypto wallets uses new language to evade detection

sourcecodered.com·65w

3 myths about npm based threats

sourcecodered.com·66w·Hacker News

Malicious web3-parser NPM package targets crypto & web3 projects

sourcecodered.com·66w

NPM package targeting Prettier ecosystem drops malware

sourcecodered.com·66w·Hacker News

Malicious NPM package infects developers with new infostealer malware

sourcecodered.com·68w

Malicious NPM package deploys new infostealer malware

sourcecodered.com·68w

Malicious NPM packages target marked-js library

sourcecodered.com·70w

Snyk security researcher deploys malicious NPM packages targeting Cursor.com

sourcecodered.com·70w·Hacker News

NPM packages deploy reverse shells when installed

sourcecodered.com·72w·Hacker News

NPM packages deploy new MacOS malware

sourcecodered.com·73w

Ultralytics publishes malicious PyPi packages

sourcecodered.com·75w

Repo swatting attack deletes GitHub and GitLab accounts

sourcecodered.com·78w

Are private bug bounty programs a good idea?

sourcecodered.com·93w

Log in to enable infinite scrolling