Recent Searches

Home
homepage
Checkmarx - SCS - Research Report - Malicious OSS Packages

Checkmarx - SCS - Research Report - Malicious OSS Packages

Published Date April 5, 2022

Download PDF

Previous Flipbook

Embedding-security-into-cloud-devops-on-aws - KOR 2022
Next Flipbook

Don’t Take Code from Strangers - An Introduction to Checkmarx Supply Chain Security

Recommended Resources

about 7 hours ago
Spring Function Cloud DoS (CVE-2022-22979) and Unintended Function Invocation

2 security issues found on spring function cloud. The Spring Framework application provides a flexible and comprehensive method for programming and configuring Java-based enterprise applications....

Read Now
4 days ago
Checkmarx Fusion - Why Correlation Matters

Watch Now
2 months ago
Solution Brief – Checkmarx One Application Security Platform

Read Now
6 days ago
How to Get a Pragmatic AppSec Program in Place? …at the Speed of DevOps and Agile!

In recent blog posts we discussed the need for AppSec programs and which frameworks are available to build a program. At Checkmarx we view it as the utmost importance that our customers get the...

Read Now
7 days ago
SCS Solution Brief -Japanese

Read Now
7 days ago
An Introduction to Supply Chain Security - Japanese

Read Now
12 days ago
KPIs and Other Metrics for Measuring the Impact of Outsourced AppSec Testing

Deciding to outsource application security testing to a managed service provider is one step toward simplifying your AppSec testing strategy and improving the impact of test results. But simply...

Read Now
13 days ago
NPM Replicator Remote Code Execution Deserialization

NPM, the package manager for Node.js, is an open source project that serves as a critical part of the JavaScript community and helps support one of the largest developer ecosystems. According to...

Read Now
26 days ago
Correlation - Application Security Testing Imperative in Modern Application Development

Read Now
19 days ago
New Technique Used by Attackers in NPM to Avoid Detection

Checkmarx SCS team recently detected several malicious NPM packages using a new evasion technique, enhancing dependency confusion attacks to help malicious packages avoid detection. This novel...

Read Now
21 days ago
Solution Brief-FUSION-Checkmarx Correlation Engine

Read Now
20 days ago
The Case for Correlation in the World of AppSec Testing

Most developers and AppSec pros understand the value of Application Security Testing. From running security scans early during software development to running a final scan after an application...

Read Now
24 days ago
SCS Solution Brief -Korean

Read Now
24 days ago
SCS - Malicious OSS Packages KOREAN

Read Now
24 days ago
An Introduction to Checkmarx Supply Chain Security KOREAN

Read Now
25 days ago
Key Considerations for Building a Proper AppSec Program for Modern Application Development

Many firms’ security efforts are focused solely on deploying technologies, applying “best practices,” and responding to a never-ending stream of security alerts and threats. As a result, security...

Read Now
27 days ago
Banking on the Cloud - The challenges and opportunities of the cloud transition

Read Now
27 days ago
Great code is secure code: best practices for using and securing open source code

Read Now
about 1 month ago
GitHub RepoJacking Weakness Exploited in the Wild by Attackers

A logical flaw in GitHub allows attackers to take control over thousands of repositories, enabling the poisoning of popular open-source packages. This flaw is yet to be fixed and the steps to...

Read Now
about 1 month ago
Attacker Caught Hijacking Packages Using Multiple Techniques to Steal AWS Credentials

What Happened? Multiple supply chain attacks from the same attacker were reported today by s0md3v. (1) PHP package hautelook/phpass with over 2.5 million installations was hijacked using the...

Read Now

Return to Home