Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-08-10 ⋅ sonatype ⋅ Sonatype Research Team
Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads
JADESNOW
2026-06-03 ⋅ sonatype ⋅ Sonatype Security Research Team
Lazarus Group's Latest: Brandjacking Campaign on npm
2022-08-11 ⋅ sonatype ⋅ Ax Sharma
PyPI Package 'secretslib' Drops Fileless Linux Malware to Mine Monero
2022-05-20 ⋅ sonatype ⋅ Ax Sharma
New 'pymafka' malicious package drops Cobalt Strike on macOS, Windows, Linux
Cobalt Strike
2021-10-20 ⋅ sonatype ⋅ Sonatype Security Research Team
Newly Found npm Malware Mines Cryptocurrency on Windows, Linux, macOS Devices
2021-06-21 ⋅ sonatype ⋅ Ax Sharma
Sonatype Catches New PyPI Cryptomining Malware
2021-03-01 ⋅ sonatype ⋅ Ax Sharma
Newly Identified Dependency Confusion Packages Target Amazon, Zillow, and Slack; Go Beyond Just Bug Bounties
2020-12-01 ⋅ sonatype ⋅ Ax Sharma
There’s a RAT in my code: new npm malware with Bladabindi trojan spotted
NjRAT
2020-11-16 ⋅ sonatype ⋅ Ax Sharma
Massive threat campaign strikes open-source repos, Sonatype spots new CursedGrabber malware
2020-09-02 ⋅ sonatype ⋅ Akshay 'Ax' Sharma
Inside the “fallguys” malware that steals your browsing data and gaming IMs; Continued attack on open source software