56,966 blogs · [ { "id": "01a087e3-c31b-7006-93bf-bc518eb655c3", "title": "“IndonesianFoods” spam campaign publishes more than 86,000 malicious NPM packages", "url": "https://sourcecodered.com/indonesianfoods-npm-worm/", "published_at": "2025-11-11T03:20:54+00:00" }, { "id": "01a087e3-c31c-706c-9490-080eab822a0a", "title": "FIRST CTI Conference Talk: Integrating Software Supply Chain Intel into Enterprise CTI", "url": "https://sourcecodered.com/software-supply-chain-cti/", "published_at": "2025-09-20T20:38:49+00:00" }, { "id": "01a087e3-c31c-706c-9490-080eac533866", "title": "EXPOSED! Thousands of public software packages expose sensitive data", "url": "https://sourcecodered.com/npm-packages-expose-sensitive-data/", "published_at": "2025-08-18T08:19:34+00:00" }, { "id": "01a087e3-c31c-706c-9490-080ead32c375", "title": "Why SCA sucks (at detecting malicious packages)", "url": "https://sourcecodered.com/sca-sucks/", "published_at": "2025-07-21T05:49:11+00:00" }, { "id": "01a087e3-c31c-706c-9490-080eadaf08a4", "title": "How do malicious software packages get identified and taken down?", "url": "https://sourcecodered.com/identify-malicious-packages/", "published_at": "2025-07-21T03:01:37+00:00" }, { "id": "01a087e3-c31c-706c-9490-080eadff826a", "title": "NPM package targets web3 smart contracts with new malware", "url": "https://sourcecodered.com/malicious-npm-truffle-suite/", "published_at": "2025-02-18T06:20:08+00:00" }, { "id": "01a087e3-c31c-706c-9490-080eae4688ec", "title": "NPM package targeting crypto wallets uses new language to evade detection", "url": "https://sourcecodered.com/npm-package-targets-exodus-wallet/", "published_at": "2025-02-16T05:58:55+00:00" }, { "id": "01a087e3-c31c-706c-9490-080eaed5b5ca", "title": "3 myths about npm based threats", "url": "https://sourcecodered.com/three-myths-npm-malware/", "published_at": "2025-02-07T23:37:38+00:00" }, { "id": "01a087e3-c31e-7143-af27-c3cb84b6443e", "title": "Malicious web3-parser NPM package targets crypto & web3 projects", "url": "https://sourcecodered.com/malicious-web3-parser-npm-package/", "published_at": "2025-02-06T01:56:00+00:00" }, { "id": "01a087e3-c31e-7143-af27-c3cb84b645bc", "title": "NPM package targeting Prettier ecosystem drops malware", "url": "https://sourcecodered.com/malicious-prettier-npm-package/", "published_at": "2025-02-05T22:38:46+00:00" } ] posts Claim your blog

Back to sourcecodered.com

Blog · corpus.blog/blogs/sourcecodered.com/posts

sourcecodered.com

sourcecodered.com

2025

“IndonesianFoods” spam campaign publishes more than 86,000 malicious NPM packages original ↗

11 Nov 2025

FIRST CTI Conference Talk: Integrating Software Supply Chain Intel into Enterprise CTI original ↗

20 Sept 2025

EXPOSED! Thousands of public software packages expose sensitive data original ↗

18 Aug 2025

Why SCA sucks (at detecting malicious packages)original ↗

21 Jul 2025

How do malicious software packages get identified and taken down?original ↗

21 Jul 2025

NPM package targets web3 smart contracts with new malware original ↗

18 Feb 2025

NPM package targeting crypto wallets uses new language to evade detection original ↗

16 Feb 2025

3 myths about npm based threats original ↗

7 Feb 2025

Malicious web3-parser NPM package targets crypto & web3 projects original ↗

6 Feb 2025

NPM package targeting Prettier ecosystem drops malware original ↗

5 Feb 2025