Solutions
Partners
Company
Resources
- Engage
  - Documentation
  - Packaging
- Discover
  - Blog
  - Knowledge Hub
  - Case Studies
  - Events
  - News
  - Press Releases
  - E-books
  - White Papers
- More resources
Contact Us

Yehuda Gelb

August 29, 2024
Year-Long Campaign of Malicious npm Packages Targeting Roblox Users

August 1, 2024
StackExchange Abused to Spread Malicious Python Package That Drains Victims’ Crypto Wallets

July 26, 2024
Malicious Python Package Targets macOS Developers To Access Their GCP Accounts

July 15, 2024
Malicious Python Packages Reveal Extensive Cybercriminal Operation Based in Iraq

June 28, 2024
Alert: CDN Service “polyfill.io” Used by 100K+ Websites Provided Malicious Code in Responses

April 10, 2024
New Technique to Trick Developers Detected in an Open Source Supply Chain Attack

March 4, 2024
GitHub Repos Used for Distributing Malware

February 26, 2024
Tornado Cash Theft Uncovered: Malicious Code Drains Funds for Months

February 8, 2024
The Hidden Dangers of Abandoned Digital Assets in Open-Source Ecosystems

SCS_vision_blog

December 22, 2023
Python Packages Leverage GitHub to Deploy Fileless Malware

December 12, 2023
How one country is impacting supply chains

SCS_vision_blog

November 16, 2023
Attacker – hidden in plain sight for nearly six months – targeting Python developers

November 8, 2023
Python obfuscation traps

November 1, 2023
The mosaic of 2023’s Software Supply Chain threats

October 12, 2023
Users of Telegram, AWS, and Alibaba Cloud targeted in latest supply chain attack

October 3, 2023
The evolutionary tale of a persistent Python threat

September 19, 2023
Attacker Unleashes Stealthy Crypto Mining via Malicious Python Package

September 7, 2023
A Deep Dive into 70 Layers of Obfuscated Info-Stealer Malware

September 5, 2023
Threat Actor Continues to Plague the Open-Source Ecosystem with Sophisticated Info-Stealing Malware

August 30, 2023
An Ongoing Open Source Attack Reveals Roots Dating Back To 2021

February 21, 2023
How NPM Packages Were Used to Spread Phishing Links

August 26, 2022
Automatic Execution of Code Upon Package Download on Python Package Manager

Follow us

Trusted by

Awards & Recognition

Checkmarx is the leader in application security and ensures that enterprises worldwide can secure their application development from code to cloud. Our consolidated platform and services address the needs of enterprises by improving security and reducing TCO, while simultaneously building trust between AppSec, developers, and CISOs. At Checkmarx, we believe it’s not just about finding risk, but remediating it across the entire application footprint and software supply chain with one seamless process for all relevant stakeholders.

We are honored to serve more than 1,800 customers, which includes 40 percent of all Fortune 100 companies including Siemens, Airbus, SalesForce, Stellantis, Adidas, Wal-Mart and Sanofi.

Platforms
Solutions
Services
Resources
- Pricing & Packaging
- Blog
- Case Studies
- Documentation
- E-books
- Events
- Glossary
- Reports
- Videos
- Webinars
- White Papers
Compare To
Company
- About Us
- Awards
- Careers
- Customers
- Events
- Leadership
- News
- Press Releases
- Trust & Security
Connect
- Contact Us
- Support Portal

©2024 Checkmarx Ltd. All Rights Reserved. iISO/IEC 27001:2013 Certified

Privacy Policy
Terms of Use