Tag: malicious code

Git, bloat, malicious, GitLab, memory-safe, CISA, agency, Skillsoft GitHub GitKraken code QA

More Than 3,000 ‘Ghost’ Accounts Spreading Malware on GitHub

Jeff Burt | July 25, 2024 | GitHub repositories, malicious code, malware, software supply chain attacks

GitHub and similar open-source code and project repositories have become a common target of cybercriminals looking to lure developers into unknowingly downloading malicious scripts ...

supply chain, security, workflows, supply chain, software, supply chain security, appsec, polyfill, software, supply chains, DevOps, DevSecOps, Google supply chain

Polyfill Becomes a Supply-Chain Risk to 100,000 Websites

Jeff Burt | June 28, 2024 | JavaScript, malicious code, Polyfill

A Chinese company in February bought the domain and GitHub account for Polyfill, a popular open-source library used by more than 100,000 websites to deliver JavaScript code ...

privacy risk Sigstore GraphQL security Checkmarx Sonatype WhiteSource the secure software development

Checkmarx Report Highlights Need for AppSec Collaboration

Mike Vizard | May 9, 2022 | Checkmarx, cyberattack, malicious code, Python, Ruby

A research report published by Checkmarx finds the same basic malicious software developed using multiple programming languages as cyberattackers industrialize their malware development processes. Checkmarx, a provider of code scanning tools, shared ...