Research   |   Oct 02, 2022

Phylum Detects Active Typosquatting Campaign Targeting NPM Developers

Phylum detects a large scale typosquat campaign targeting the NPM...

Research   |   Sep 29, 2022

The Dependency Network Shows the Complexity of the Software Ecosystem

Part 2 in a blog series that will explore the software dependency...

Research   |   Sep 26, 2022

Open-Source Malware Is Bad, and You Should Feel Bad

It is no secret that malware is pervasive. What may come as a...

Research   |   Sep 23, 2022

Malware Targeting dYdX Crypto Exchange

Shortly before 12:00 PM UTC on September 23, 2022, our platform...

Research   |   Sep 15, 2022

NPM Malware Targeting HubSpot’s Bucky Client

Our risk analysis platform recently alerted us to a malicious package...

Attack Types   |   Aug 25, 2022

The Unacknowledged Risk of Authors

One of the largest attack surfaces across the software supply chain...

Research   |   Jul 01, 2022

Phylum's Monthly Malware Report: June 2022 - Don't Believe the Type

Check out the results from Phylum's monthly analysis of packages from...

Research   |   Jun 01, 2022

Hidden Dependencies Lurking in the Software Dependency Network

Part 1 in a blog series that will explore the software dependency...

Research   |   May 19, 2022

Phylum's Monthly Malware Report: May 2022 - Precarious Payloads

To combat software supply chain attacks Phylum has been purpose-built...

Research   |   Apr 19, 2022

Phylum’s Monthly Malware Report: April 2022 - Malware Magnified

In 30 days Phylum has processed a total of 647,928 packages across...