Research reports
1,224 reports from 387 publishers45 added in the past week
1 report, newest added first
Added Sun 25 Oct
From PostCSS Masquerading to Windows RAT
The package name is not random. The legitimate postcss-selector-parser package is widely used across the JavaScript build ecosystem, with npm reporting more than 150M weekly downloads. postcss-minify-selector-parser is not a classic one-character typo.…
MalwareSupply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.