Research

North Korea Still Attacking Developers via npm

Research

There's a renewed surge of attacks with obfuscated JavaScript and fake job campaigns to compromise developers and infiltrate companies. See Phylum research.

Phylum Research Team Aug 29, 2024 3 min read

Subscribe to our research

Keep up with the latest software supply chain attacks

The Great npm Garbage Patch

Open-source spam is a growing threat. The Tea protocol and npm are taking action, but the problem persists. Our research is dedicated to combating this issue and protecting the integrity of the open-source ecosystem. See Phylum Research....

Phylum Research Team Aug 6, 2024 5 min read

Q2 2024 Evolution of Software Supply Chain Security Report

In Q2 2024, verified malicious package publications were up with increased obfuscation. Attack sophistication has continued to evolve. See the Phylum Research Team's Quarterly Report....

Phylum Research Team Jul 31, 2024 7 min read

Fake AWS Packages Ship Command and Control Malware In JPEG Files

Beware of malicious JPEG files. Fake AWS packages sneak command-and-control malware into systems, leaving developers vulnerable to attack for more extended periods. See Phylum Research....

Phylum Research Team Jul 14, 2024 5 min read

New Tactics from a Familiar Threat

North Korean hackers are using a new tactic to target software developers. They create fake copies of legitimate packages to steal cryptocurrency and other sensitive data. See Phylum Research......

Phylum Research Team Jul 8, 2024 9 min read