Record · corpus.blog/posts/01a07df5-21bb-71db-812f-ba0847852394

Depscanner: Find orphaned packages before the bad guys do

SensePost · published 3 June 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at sensepost.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 30
Words captured: 2,449

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://pypi.org/

pypi.org

https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610

medium.com

https://github.com/sensepost/depscanner/

github.com

https://attack.mitre.org/techniques/T1195/

attack.mitre.org

https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf

cs.cmu.edu

https://en.wikipedia.org/wiki/XZ_Utils_backdoor

en.wikipedia.org

https://socket.dev/blog/roblox-developers-targeted-with-npm-packages-infected-with-infostealers

socket.dev

https://bsky.app/profile/shifttymike.bsky.social

bsky.app

https://www.youtube.com/watch?v=ExMuk_Vdyac&t=721s&ab_channel=BlackHat

youtube.com

https://x.com/haroonmeer

x.com

https://docs.docker.com/compose/

docs.docker.com

https://github.com/sensepost/depscanner/blob/main/README.md

github.com

https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens

docs.github.com

https://github.com/projectdiscovery/public-bugbounty-programs

github.com

https://www.hackerone.com/

hackerone.com

https://canarytokens.org/nest/

canarytokens.org

https://docs.npmjs.com/cli/v8/using-npm/workspaces

docs.npmjs.com

https://pnpm.io/workspaces

pnpm.io

https://pypi.org/help/

pypi.org

https://policies.python.org/pypi.org/Acceptable-Use-Policy/

policies.python.org

https://socket.dev/

socket.dev

https://snyk.io/

snyk.io

https://www.npmjs.com/package/fs-xetra

npmjs.com

https://www.npmjs.com/package/seemver

npmjs.com

https://github.com/dataDog/guarddog

github.com

https://securitylabs.datadoghq.com/articles/introducing-supply-chain-firewall/

securitylabs.datadoghq.com

https://snyk.io/es/

snyk.io

https://www.ibm.com/docs/en/randori?topic=2022-solarwinds-orion-cve-2020-10148

ibm.com

https://securitylabs.datadoghq.com/articles/mut-8964-an-npm-and-pypi-malicious-campaign-targeting-windows-users/

securitylabs.datadoghq.com

https://www.bbc.com/news/articles/cwy3l02wxqdo

bbc.com