Research reports
1,224 reports from 387 publishers45 added in the past week
Added Thu 6 Aug
How TeamPCP's Python Toolkit Survives a C2 Takedown: FIRESCALE, GitHub, and the Victim's Own Account
When Wiz Research published their analysis of the Mini Shai-Hulud supply chain campaign, the focus was on the trojanized npm and PyPI packages used to reach developer machines. What happened after delivery got considerably less coverage. The second-stage…
Supply chainTakedowns and arrests
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.