41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a087e3-c31c-706c-9490-080ead32c375

Why SCA sucks (at detecting malicious packages)

sourcecodered.com · published 21 July 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at sourcecodered.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 17
Words captured: 2,199

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://sourcecodered.com/wp-content/uploads/2025/07/pycoon-malware-npm-2025-07-19-at-6.37.41 pm.png

sourcecodered.com

https://www.linkedin.com/in/axsharma/

linkedin.com

https://www.bleepingcomputer.com/news/security/popular-npm-linter-packages-hijacked-via-phishing-to-drop-malware/

bleepingcomputer.com

https://socket.dev/blog/npm-phishing-email-targets-developers-with-typosquatted-domain

socket.dev

https://sourcecodered.com/wp-content/uploads/2025/07/sca-sucks-snyk-truncated-versions.png

sourcecodered.com

https://sourcecodered.com/wp-content/uploads/2025/07/sca-sucks-ghsa-missing-advisory.png

sourcecodered.com

https://sourcecodered.com/wp-content/uploads/2025/07/Screenshot-2025-07-21-at-11.14.03 am.png

sourcecodered.com

https://sourcecodered.com/wp-content/uploads/2025/07/sca-sucks-2025-07-21-at-6.57.00 am-scaled.png

sourcecodered.com

https://sourcecodered.com/wp-content/uploads/2025/07/Screenshot-2025-07-21-at-11.33.17 am.png

sourcecodered.com

https://sourcecodered.com/wp-content/uploads/2025/07/Screenshot-2025-07-21-at-10.24.32 am.png

sourcecodered.com

https://sourcecodered.com/wp-content/uploads/2025/07/Screenshot-2025-07-21-at-11.03.24 am.png

sourcecodered.com

https://github.com/ossf/malicious-packages/pull/945

github.com

How do malicious software packages get identified and taken down? Read at the source ↗

sourcecodered.com

https://www.linkedin.com/posts/mccartypaul_softwaresupplychain-malware-activity-7329264390153687040-Jz8w?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAXYN_oBdp0mXzKH9fuAofjdchqyKsoY6jM

linkedin.com

https://osv.dev/list?q=&ecosystem=npm

osv.dev

https://github.com/advisories/GHSA-f29h-pxvx-f335

github.com

https://github.com/6mile/MALOSS

github.com