Insights and Resources

How to Mature Your Software Consumption and Modernize Your Software Supply Chain Security

If you are taking a fresh look at your appsec program, consider what you can do to mature your software consumption and modernize your software supply chain security.

Aaron Bray Aug 26, 2024 6 min read

Subscribe to our research

Keep up with the latest software supply chain attacks

Compiled Python Files

Learn how compiled Python modules can be included in packages to obfuscate intent and deliver a malicious payload....

Charles Coggins May 16, 2024 6 min read

Python Executable Hooks

Python customization modules in user or global site-packages directories can carry malicious code that runs every time the Python interpreter does....

Charles Coggins May 13, 2024 4 min read

Adding Spurious Wheels to PyPI

Learn how easy it is for threat actors to hide their malware in Python wheel artifacts hosted on the PyPI registry....

Charles Coggins May 10, 2024 4 min read

Modern Python Build Hooks

Arbitrary code execution is possible with build hooks offered by modern Python package installers when building modern PEP-518 pyproject.toml projects....

Charles Coggins May 6, 2024 14 min read