In The News
October 7, 2022

The CyberWire: An unidentified threat actor deploys malicious NPM packets

ReversingLabs researchers outline the placement of a malicious NPM package in a widely used components library
October 3, 2022

SC Media: The federal government has been busy on supply chain guidance, so everyone take a deep breath

Mario Vuksan tells federal contractors what they need to know about all the new executive orders, memos, and pending legislation from the government.
September 23, 2022

The Hacker News: Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

A malicious NPM package has been found masquerading as the legitimate software library for Material Tailwind.
September 23, 2022

Dark Reading: Malicious npm Package Poses as Tailwind Tool

ReversingLabs researchers detected the malicious behavior because the purported library modification contained code obfuscated with JavaScript Obfuscator
September 2, 2022

DevOps.com: Supply Chain Security - Has the Next SolarWinds Already Happened?

The SolarWinds incident was the subject of five separate talks and panels at the recent RSA conference in San Francisco