[ORGANIZATION]
StepSecurity
Featured in 2 tracked stories · first seen
Situations
Software supply-chain attacks targeting developers
2 clusters · 12 sources · last updated
Latest: Malicious npm and PyPI package releases target developer credentials
Cybersecurity researchers have identified multiple supply-chain attacks targeting developer environments through malicious packages on the npm and PyPI registries. An initial campaign named NEBULA utilized npm packages
Software supply chain security vulnerabilities
2 clusters · 5 sources · last updated
Latest: Software supply chain vulnerabilities identified in npm and GitHub
Security researchers have identified several significant software supply-chain vulnerabilities and malicious campaigns targeting developers through the npm registry and GitHub. Initial findings detailed the MALFEX campa