Hot Topics

npm

GitHub satellite cyberattack Strontium cyberwarfare counter-drone The Legality of Waging War in Cyberspace

GitHub Developers Targeted by North Korea’s Lazarus Group

| | Cybersecurity, GitHub, Lazarus Group, npm, supply chain
The Lazarus Group is behind a social engineering campaign that uses repository invitations and malicious npm packages to target developers on GitHub ...
Security Boulevard
npm Manifest Confusion – What Is It and Do You Really Need to Worry About It?

npm Manifest Confusion – What Is It and Do You Really Need to Worry About It?

| | dependencies, DevZone, FEATURED, npm, open source
Yesterday, Darcy Clarke, a software developer and a former npm CLI team Engineering Manager, steered everyone’s attention towards a gap in the npm registry website – what he calls “manifest confusion.” ...
Sonatype Blog
Malware Monthly - March 2023

Malware Monthly – March 2023

| | DevZone, FEATURED, Malware Monthly, malware prevention, npm, PyPI, Vulnerabilities
  ...
Sonatype Blog
Malware Monthly - February 2023

Malware Monthly – February 2023

| | DevZone, Malware Monthly, malware prevention, npm, PyPI, Vulnerabilities
  ...
Sonatype Blog
Malware Monthly - January 2023

Malware Monthly – January 2023

| | DevZone, FEATURED, Malware Monthly, malware prevention, npm, PyPI, Vulnerabilities
  ...
Sonatype Blog
Malware Monthly - December 2022

Malware Monthly – December 2022

| | DevZone, Malware Monthly, malware prevention, npm, PyPI, Vulnerabilities
  ...
Sonatype Blog

This Week in Malware – Over 70 Packages Discovered

| | DevZone, malware prevention, npm, PyPI, This Week in Malware, Vulnerabilities
This week in malware, we discovered and analyzed six dozen packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries ...
Sonatype Blog

This Week in Malware – Nearly 40 Packages Discovered

| | DevZone, malware prevention, npm, PyPI, This Week in Malware, Vulnerabilities
This week in malware, we discovered and analyzed nearly 40 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries ...
Sonatype Blog

This Week in Malware – Over 50 Packages Discovered

| | DevZone, malware prevention, npm, PyPI, This Week in Malware, Vulnerabilities
This week in malware, we discovered and analyzed nearly five dozen packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries ...
Sonatype Blog

This Week in Malware – Over 100 Packages Discovered

| | DevZone, malware prevention, npm, PyPI, This Week in Malware, Vulnerabilities
This week in malware, we discovered and analyzed more than 100 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries ...
Sonatype Blog
Load more