packages

July 11, 2022

PyPI Repository Makes 2FA Security Mandatory for Critical Python Projects

The maintainers of the official third-party software repository for Python have begun imposing a new two-factor authentication (2FA) condition for…
Read More »
July 7, 2022

Over 1200 NPM Packages Found Involved in “CuteBoi” Cryptomining Campaign

Researchers have disclosed a new large-scale cryptocurrency mining campaign targeting the NPM JavaScript package repository. The malicious activity, attributed to…
Read More »
July 5, 2022

Researchers Uncover Malicious NPM Packages Stealing Data from Apps and Web Forms

A widespread software supply chain attack has targeted the NPM package manager at least since December 2021 with rogue modules…
Read More »
July 1, 2022

Solving the indirect vulnerability enigma – fixing indirect vulnerabilities without breaking your dependency tree

Fixing indirect vulnerabilities is one of those complex, tedious and, quite frankly, boring tasks that no one really wants to…
Read More »
June 24, 2022

Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

Researchers have discovered a number of malicious Python packages in the official third-party software repository that are engineered to exfiltrate…
Read More »
May 27, 2022

Nearly 100,000 NPM Users’ Credentials Stolen in GitHub OAuth Breach

Cloud-based repository hosting service GitHub on Friday shared additional details into the theft of GitHub integration OAuth tokens last month,…
Read More »
May 24, 2022

Popular PyPI Package ‘ctx’ and PHP Library ‘phpass’ Hijacked to Steal AWS Keys

Two trojanized Python and PHP packages have been uncovered in what’s yet another instance of a software supply chain attack…
Read More »
May 23, 2022

Yes, Containers Are Terrific, But Watch the Security Risks

Containers revolutionized the development process, acting as a cornerstone for DevOps initiatives, but containers bring complex security risks that are…
Read More »
May 18, 2022

Researchers Expose Inner Workings of Billion-Dollar Wizard Spider Cybercrime Gang

The inner workings of a cybercriminal group known as the Wizard Spider have been exposed, shedding light on its organizational…
Read More »
May 13, 2022

Google Created ‘Open-Source Maintenance Crew’ to Help Secure Critical Projects

Google on Thursday announced the creation of a new “Open Source Maintenance Crew” to focus on bolstering the security of…
Read More »

Previous page Next page