Research reports
1,224 reports from 387 publishers45 added in the past week
Added Fri 14 Aug
Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads
Sonatype Research Labs identified six npm packages delivering the same malicious payload: three hijacked legitimate packages and three additional malicious packages, tracked as sonatype-2026-005899 and sonatype-2026-005901. The malware uses the same Ethereum…
Supply chain
Added Sun 17 Aug 2025
How-North-Korea-Backed-Lazarus-Group-is-Weaponizing-Open-Source-Whitepaper.pdf
How North Korea-Backed Lazarus Group Is Weaponizing Open Source to Target Developers 1 How North Korea-Backed Lazarus Group Is Weaponizing Open Source to Target Developers Sonatype Security Research How North Korea-Backed Lazarus Group Is Weaponizing Open…
State-sponsoredMalware
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.