Sept. 2, 2022, 3:46 p.m. | alinskens@sonatype.com (Aaron Linskens)

Sonatype Blog blog.sonatype.com




This week in malware we discovered and analyzed 120 packages flagged as malicious, suspicious, or dependency confusion attacks.


As a follow-up to our coverage last week, new details emerged regarding a phishing campaign that sought to steal account credentials of PyPI maintainers and lace their packages with malware.


devzone malware malware prevention phishing pypi this week in malware vulnerabilities

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Information Security Engineers

@ D. E. Shaw Research | New York City

Cyber Security Architect - SR

@ ERCOT | Taylor, TX

SOC Analyst

@ Wix | Tel Aviv, Israel

Associate Director, SIEM & Detection Engineering(remote)

@ Humana | Remote US

Senior DevSecOps Architect

@ Computacenter | Birmingham, GB, B37 7YS