Ossprey

Nine express/react typosquats with a preinstall hook that pulls a Codeberg/Wayback-hosted worm: CHAOS RAT over Tor, SSH key theft and spread, AUR and npm package poisoning.

How Ossprey protects from novel AI-accelerated malware development, and cross-ecosystem supply-chain attacks.

Two malicious packages have been published to the pub.dev platform, this is the first time a supply chain attack has hit the platform.

How a single pull request comment published ten provenance-signed malicious releases on npm, and our data on how few developers actually run npm 12.

Earlier this morning, Ossprey Security detected the beginning of a new Shai-Hulud wave affecting packages on NPMJS. We are now counting over 2000 compromised versions of packages, affecting multiple organisations and package scopes. We believe that this i

Learn why Ossprey raised $2.65M to detect malicious open source packages before they reach production and protect modern software supply chains.

Ossprey has detected a malicious package on NPM, which guards constructs a SHA256 to only execute a reverse shell on one host

Ossprey Security uncovered two linked npm packages, aurelia-type and selparsecss-selector, delivering an IPFS-hosted cross-platform malware dropper.

How Ossprey Security traced five trojanized @asyncapi npm packages (2M+ weekly downloads) to a stolen GitHub Actions PAT and a Miasma-variant IPFS payload.

Ossprey uncovered 298 malicious URLs and 26 C2 servers tied to DPRK