progscrape: blog.phylum.io

70% of new NPM packages in last 6 months were spam

3 months ago blog.phylum.io javascript spam

npm Packages Found Sending Malware in JPEG files

4 months ago blog.phylum.io javascript jpeg malware

Unintended Consequences of Open Source Sustainability Platforms

7 months ago blog.phylum.io

Ongoing malware laced developer job interviews

9 months ago blog.phylum.io malware

Crypto-Themed NPM Packages Found Delivering Stealthy Malware

11 months ago blog.phylum.io malware

Rust Malware Staged on Crates.io

15 months ago blog.phylum.io malware rust security

Malicious NPM packages attributed to North Korean state actors

16 months ago blog.phylum.io

Mischievous NPM Publications

18 months ago blog.phylum.io javascript

How Attackers Can Sneakily Slip Malware Packages Into Poetry.lock Files

18 months ago blog.phylum.io malware python

Attackers Repurposing existing Python-based Malware for Distribution on NPM

19 months ago blog.phylum.io javascript malware

Malicious Actors Use Unicode Support in Python to Evade Detection

20 months ago blog.phylum.io python security unicode

Attackers are hiding malware in minified packages distributed to NPM

19 months ago blog.phylum.io javascript malware

A PyPI typosquatting campaign post-mortem

20 months ago blog.phylum.io

Aggressive Attack on PyPI Attempting to Deliver Rust Executable

21 months ago blog.phylum.io python rust

Ransomware being published to PyPI in ongoing campaign

23 months ago blog.phylum.io ransomware

Malicious Python Packages Replace Crypto Addresses in Developer Clipboards

24 months ago blog.phylum.io python

Dozens of malicious PyPI packages discovered targeting developers

24 months ago blog.phylum.io

Disrupting an attacker publishing malware to PyPI

24 months ago blog.phylum.io malware

Active Typosquatting Campaign Targeting NPM Developers

2 years ago blog.phylum.io

The Anatomy of a Malicious Package

2 years ago blog.phylum.io

Using Entropy to Identify Obfuscated Malicious Code

2 years ago blog.phylum.io

Using Spark and Rust build distributed and flexible analytics pipelines

3 years ago blog.phylum.io rust

An analysis of author behavior during Hacktoberfest 2020

3 years ago blog.phylum.io

How NPM Malware Works

4 years ago blog.phylum.io malware

The Anatomy of a Malicious Package

4 years ago blog.phylum.io

>progscrape ▒

All the news that's fit to scrape

Display options

70% of new NPM packages in last 6 months were spam

npm Packages Found Sending Malware in JPEG files

Unintended Consequences of Open Source Sustainability Platforms

Ongoing malware laced developer job interviews

Crypto-Themed NPM Packages Found Delivering Stealthy Malware

Rust Malware Staged on Crates.io

Malicious NPM packages attributed to North Korean state actors

Mischievous NPM Publications

How Attackers Can Sneakily Slip Malware Packages Into Poetry.lock Files

Attackers Repurposing existing Python-based Malware for Distribution on NPM

Malicious Actors Use Unicode Support in Python to Evade Detection

Attackers are hiding malware in minified packages distributed to NPM

A PyPI typosquatting campaign post-mortem

Aggressive Attack on PyPI Attempting to Deliver Rust Executable

Ransomware being published to PyPI in ongoing campaign

Malicious Python Packages Replace Crypto Addresses in Developer Clipboards

Dozens of malicious PyPI packages discovered targeting developers

Disrupting an attacker publishing malware to PyPI

Active Typosquatting Campaign Targeting NPM Developers

The Anatomy of a Malicious Package

Using Entropy to Identify Obfuscated Malicious Code

Using Spark and Rust build distributed and flexible analytics pipelines

An analysis of author behavior during Hacktoberfest 2020

How NPM Malware Works

The Anatomy of a Malicious Package