Tag: Phylum

Cybersecurity researchers have uncovered a series of malicious npm packages designed to target Ethereum wallet developers, introducing an...

Cybersecurity researchers have discovered a malicious package on the npm package registry designed to deploy a remote access trojan (RAT)...

The discovery of malicious "test files" linked to the XZ Utils backdoor within the widely used Rust crate liblzma-sys has sparked concerns among...

Recent findings by cybersecurity firm Phylum reveal a concerning development in the software supply chain, as fake npm packages on the Node.js repository...

Phylum has been engaged in uncovering and reporting on a string of malware campaigns that have targeted open-source ecosystems in recent weeks

Software supply chain security firm Phylum has integrated the Open Policy Agent (OPA) into its risk analysis engine, giving security teams more flexibility.