Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Tue 21 Jul
ChainVeil: A Malicious npm Supply Chain Attack by SuccessKey
Checkmarx Zero’s ongoing research into malicious open-source libraries has uncovered and reported a targeted supply chain campaign that bears strong indications of being operated by a threat actor known as “SuccessKey” (no apparent relationship to several…
Supply chain
Sequel to ChainVeil npm malware: ViteVenom
When we published our ChainVeil report in June 2026, we noted something that didn’t fit: the SuccessKey campaign’s Command and Control (Command and Control (C2)) infrastructure contained a secondary server at 198.105.127[.]210 and a tertiary server at…
MalwareSupply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.