Category Archives: dependencies

Fake npm Packages Found in GitHub Repository

Posted on by

Security researchers discovered four vulnerable npm packages uploaded to GitHub that were capable of collecting the user’s IP address, geolocation and device hardware data. Not all attacks have a high-visibility profile. Some threat actors use much mor… Continue reading Fake npm Packages Found in GitHub Repository→

PyPi ‘Cheese Shop’ Malware Illustrates Software Supply Chain Risk Vector

Posted on by

Recent malware installed in PyPI underscores the need for code verification at the code repository level to defend the software supply chain.
The post PyPi ‘Cheese Shop’ Malware Illustrates Software Supply Chain Risk Vector appeared fi… Continue reading PyPi ‘Cheese Shop’ Malware Illustrates Software Supply Chain Risk Vector→