Welcome to our blog
Get the latest insights from our team & community.
Stay in the know.
Get the latest cybersecurity news, product updates, and resources by email.
- Technical
The Anatomy of a Malicious Package
What does a malicious package actually look like in practice? We'll walk through some hypothetical exercises to see how malware generally works, and what sort of functions we might expect, from...
- Software Supply Chain Security
The State of the NPM Ecosystem
What does the upstream for major packages really look like? Over the past few years, the shape of the open source ecosystem landscape has shifted drastically, exploding both in the volume of...
- Software Supply Chain Security
Typosquatting and Other Attacks Against Open Source Dependencies
In November of 2018 a malicious Javascript package was identified and subsequently removed from the NPM ecosystem. A nefarious modification was introduced into this package, flatmap-stream, which was...
