Hacker uses Trojanized Python and PHP Packages to Steal AWS Keys

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Composer and Packagist Introduce New Supply Chain Security Measures After PHP Ecosystem Attacks

Composer and Packagist.org are implementing new security measures to combat rising software supply chain attacks targeting the PHP open-sour

Composer and Packagist Introduce New Supply Chain Security Measures After PHP Ecosystem Attacks

Composer and Packagist.org are implementing new security measures to combat rising software supply chain attacks targeting the PHP open-sour

PyPI Supply Chain Attacks Expand: New Malicious Packages Target Bioinformatics and MCP Developers

Socket Threat Research team identified a new wave of PyPI supply chain attacks (Mini Shai-Hulud, Miasma, and Hades) that has expanded beyond

Supply Chain Attacks on Open-Source Software: Case Study of Malicious Pull Request Attempts

The article discusses recent supply chain attacks on open-source software projects like LiteLLM and axios, with a specific case study of att

North Korean Chollima Group Targets PHP Developers via Malicious Packagist Package

Security researchers discovered obfuscated JavaScript hidden inside a development version of the legitimate Laravel package roberts/leads on

Untitled