Phylum Research | Software Supply Chain Security (Page 10)

Q3 2023 Evolution of Software Supply Chain Security Report

Phylum Research

Phylum specializes in identifying and mitigating software supply chain attacks, focusing on protecting developers against threats originating from open-source ecosystems. By meticulously monitoring and analyzing every package published in real-time across seven diverse ecosystems (i.e.

Phylum Research Team Oct 17, 2023 11 min read

Phylum Blocks Software Supply Chain Security Attacks

Phylum identifies malicious or risky open-source packages before they enter the software supply chain.

SCA or public databases

82%

of Phylum’s findings are not found by
SCA or reported to public databases

Other curation tools

70%

of Phylum’s findings are not found by
other curation tools

Other software supply chain companies

60%

of Phylum’s findings are not found by
other software supply chain companies

Phylum Discovers SeroXen RAT in Typosquatted NuGet Package

On October 6, 2023, Phylum’s automated risk detection platform alerted us to a suspicious publication on NuGet. After working through several layers of obfuscation...

Phylum Research Team Oct 12, 2023 6 min read

Cloud Provider Credentials Targeted in New PyPI Malware Campaign

Over the weekend, Phylum’s automated risk detection alerted us to a series of publications surrounding packages on PyPI, all purporting to be some kind...

Phylum Research Team Oct 10, 2023 4 min read

The Power of the Pod

I love podcasts. I started listening in 2005 with an Apple iPod I got the year before. To really date me, I used a 3....

Charles Coggins Sep 30, 2023 5 min read

Sensitive Data Exfiltration Campaign Targets npm and PyPI

Phylum has discovered another new multi-ecosystem campaign aiming to exfiltrate sensitive machine information to a remote server. The attack has grown in both scope and...

Phylum Research Team Sep 26, 2023 13 min read

Phylum Blocks Software Supply Chain Security Attacks

Phylum identifies malicious or risky open-source packages before they enter the software supply chain.

Subscribe to our research