Phylum Research

Attack Types   |   Aug 27, 2021

Detecting Potential Bad Actors in GitHub

Phylum is continually working to improve our author risk analysis to...

Attack Types   |   Apr 25, 2021

Build System and Version Control Compromises - the New Normal

While SolarWinds made headlines within the last few months for the...

Attack Types   |   Mar 23, 2021

Internally Hosted Dependencies: A Losing Battle

Dependency confusion allows bad actors to emulate internal software...

Attack Types   |   Mar 17, 2021

Repo Jacking: Hidden Danger in Broken Links

Repo jacking is an insidious software supply chain issue. Attackers...

Attack Types   |   Jan 09, 2021

How to Understand and Defend Against SolarWinds-Type Attacks

In late 2020, one of the most devastating cyber attacks of the last...

Attack Types   |   Aug 28, 2020

The Anatomy of a Malicious Package (Part 2)

Picking up where we left off in the last article, it's time to start...

Attack Types   |   Aug 21, 2020

The Anatomy of a Malicious Package

What does a malicious package actually look like in practice? We'll...

Attack Types   |   Jul 27, 2020

Typosquatting and Other Attacks Against Open Source Dependencies

In November of 2018, a malicious Javascript package was identified...