41,554 blogs · 5,063,431 posts Claim your blog

Record · corpus.blog/posts/01a0ca89-1b4b-734c-8caf-ad9b25b28fed

The Package Analysis Project: Scalable detection of malicious open source packages

Google Security Blog · published 28 April 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at security.googleblog.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 13
Words captured: 744

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/advisories/GHSA-pjwm-rvh2-c87w

github.com

Alert: peacenotwar module sabotages npm developers in the node-ipc package to protest the invasion of Ukraine Read at the source ↗

https://openssf.org/

openssf.org

https://openssf.org/blog/2022/04/28/introducing-package-analysis-scanning-open-source-packages-for-malicious-behavior

openssf.org

https://console.cloud.google.com/bigquery?d=packages&p=ossf-malware-analysis&t=analysis&page=table

console.cloud.google.com

https://github.com/ossf/package-analysis/blob/main/docs/case_studies.md

github.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir73vRVQDjYoVlB1v6_gWvPMKQp-jUwDdt5KbkOOwq6e8D63U-q9BWcSBl3f6U3Lw5r1EQsfYUPXfQZMu8aqgtlU8Pw3EbSfQcLq_sWYj98Jhwf_hVIF5Fp4-3rK4XrUIaSGeJxnjwKm1bt-oDUqvt-iL99GKYft_9GKeK-d9hbx5sTyL3NwAV1wAS/s594/PA1.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghwH4jvlfQjlVqNDZAa30Gz30W8RzJIJv_rahMysL_w8-fKIvG9mt_ATqa8zdaBDxXDGeo7jXpoHi6bqJLq0B5A5lSXBE8oEwi9SVILf27URuXzi7amXPIS9PVN-CnrEzLIRlE_1Z_fooWw78sjZSciOVwpi-pmpDcrAdD2Pd_NxG74h82WIWF1orb/s681/PA2.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfUdj6W-Bo8AQWxUjIMmP8h4exfsFNz-HMVSY1OR6hmffmiW6S3ijEynHY-h74sOXRhiWwejuYGRHkf5bY0t-pfkpawhy9s-kOKryZQYdGbPA9Lz0gGBgZ8bQ4XbnBalTaNbF9GvQuZE1W0Sp_PMPQE2K_eOZi__wV7fww8noRL-6pL7LyMIyPT_q1/s468/PA3.png

blogger.googleusercontent.com

https://www.darkreading.com/vulnerabilities-threats/beware-the-package-typosquatting-supply-chain-attack

darkreading.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8m1coKcAmZyyGB89MHpvAgR58ADIMn2-Bj-kS_vav_Rt6kOuAgiCI45gXXTpWr00I3NDH1j1jCNzKt1RJarzlMi4XTQkfv541jHaMB4WBiBh1oY__BZok8tjxHuEvI4GL6R3NXFO9agQrZlkbqNMh07cWvbTGcWF4sgYnLhfuKdZXDbq71TLvNEVI/s792/PA4.png

blogger.googleusercontent.com

https://github.com/ossf/package-analysis

github.com

https://github.com/ossf/package-analysis/milestones

github.com