| 1. | | Python Crypto Library Updated to Steal Private Keys (phylum.io) |
| 9 points by batmaniam on Nov 23, 2024 | past | 1 comment |
|
| 2. | | Typosquat Campaign Targeting NPM Developers (phylum.io) |
| 2 points by gnabgib on Nov 4, 2024 | past |
|
| 3. | | 70% of new NPM packages in last 6 months were spam (phylum.io) |
| 225 points by louislang on Aug 7, 2024 | past | 111 comments |
|
| 4. | | Malicious Go Binary Delivered via Steganography in PyPI (phylum.io) |
| 3 points by awaythrow999 on May 16, 2024 | past |
|
| 5. | | Malicious Go Binary Delivered via Steganography in PyPI (phylum.io) |
| 4 points by campuscodi on May 12, 2024 | past |
|
| 6. | | Malicious Python Code Gains Execution (phylum.io) |
| 6 points by louislang on April 30, 2024 | past |
|
| 7. | | Spam: Unintended Consequences of Open Source Sustainability Platforms (phylum.io) |
| 3 points by louislang on April 9, 2024 | past |
|
| 8. | | Typosquatting Campaign Targets Python Developers (phylum.io) |
| 1 point by sigtstp on March 29, 2024 | past | 1 comment |
|
| 9. | | PyPI Suspends New User and Project Creation in Wake of Malware Campaign (phylum.io) |
| 16 points by louislang on March 28, 2024 | past | 7 comments |
|
| 10. | | Fake Developer Jobs Laced with Malware (phylum.io) |
| 5 points by pcloadletter_ on Feb 24, 2024 | past | 1 comment |
|
| 11. | | Crypto-Themed NPM Packages Found Delivering Stealthy Malware (phylum.io) |
| 15 points by arsabulhaiue on Nov 25, 2023 | past | 2 comments |
|
| 12. | | Malicious Nuget Packages Found Delivering SeroXen Malware (phylum.io) |
| 2 points by louislang on Oct 12, 2023 | past |
|
| 13. | | Cryptocurrency Miner Masquerading as GCC Compiler Found in NPM Package (phylum.io) |
| 18 points by freedude on Aug 31, 2023 | past | 4 comments |
|
| 14. | | Rust Malware Staged on Crates.io (phylum.io) |
| 93 points by inferiorhuman on Aug 25, 2023 | past | 58 comments |
|
| 15. | | Rust Malware Staged on Crates.io (phylum.io) |
| 5 points by 1MachineElf on Aug 25, 2023 | past |
|
| 16. | | Highly-Targeted Attacks Continue to Plague NPM (phylum.io) |
| 4 points by louislang on Aug 14, 2023 | past |
|
| 17. | | Sophisticated, Highly-Targeted Attacks Continue to Plague NPM (phylum.io) |
| 5 points by mcgin on Aug 12, 2023 | past |
|
| 18. | | June’s Sophisticated NPM Attack Attributed to North Korea (phylum.io) |
| 2 points by thunderbong on July 26, 2023 | past |
|
| 19. | | Mischievous NPM Publications (phylum.io) |
| 78 points by jwalton on May 5, 2023 | past | 25 comments |
|
| 20. | | Malicious Actors Use Unicode Support in Python to Evade Detection (phylum.io) |
| 3 points by rrampage on April 7, 2023 | past | 1 comment |
|
| 21. | | Malicious Actors Use Unicode Support in Python to Evade Detection (phylum.io) |
| 2 points by rbanffy on April 5, 2023 | past |
|
| 22. | | Malicious Actors Use Unicode Support in Python to Evade Detection (phylum.io) |
| 3 points by todsacerdoti on March 29, 2023 | past |
|
| 23. | | A PyPI typosquatting campaign post-mortem (phylum.io) |
| 3 points by louislang on Feb 28, 2023 | past |
|
| 24. | | Aggressive Attack on PyPI Attempting to Deliver Rust Executable (phylum.io) |
| 148 points by iamspoilt on Feb 24, 2023 | past | 102 comments |
|
| 25. | | A Deep Dive into PoweRAT: A Newly Discovered Stealer/Rat Combo Polluting PyPI (phylum.io) |
| 1 point by peteatphylum on Jan 5, 2023 | past |
|
| 26. | | Ransomware Python Packages Currently Being Published to PyPI (phylum.io) |
| 7 points by louislang on Dec 9, 2022 | past | 3 comments |
|
| 27. | | Disrupting a PyPI Software Supply Chain Threat Actor (phylum.io) |
| 5 points by louislang on Nov 23, 2022 | past |
|
| 28. | | W4SP Stealer PyPI Injections – Attacker Now Masquerades as Popular Orgs (phylum.io) |
| 2 points by aflukasz on Nov 22, 2022 | past |
|
| 29. | | Malicious Python packages replace crypto addresses in developer clipboards (phylum.io) |
| 92 points by sbf501 on Nov 7, 2022 | past | 46 comments |
|
| 30. | | Dozens of malicious PyPI packages discovered targeting developers (phylum.io) |
| 754 points by louislang on Nov 2, 2022 | past | 320 comments |
|
|
| More |
