Picture

Phylum @Phylum_IO

Phylum automates software supply chain security to contextualize risks, block attacks and allow organizations to only use trusted open-source code. phylum.io Joined August 2020
  • Tweets
    401
  • Followers
    333
  • Following
    375
  • Likes
    700
Phylum_IO Profile Picture

Phylum @Phylum_IO

8 months ago

📢 Breaking news: We’re beyond excited to announce that our malicious package analysis, detection, and mitigation technology has been acquired by @Veracode! Together, we’ll take software supply chain security to the next level. Read more below: veracode.com/press-release/…

Phylum_IO Profile Picture

Phylum @Phylum_IO

10 months ago

Phylum Exclusive Research Report by #CEO, Aaron Bray ⚔️ 2025 Software Supply Chain Security Trends & Predictions: AI, Shadow Application Development and Nation-State Attacks - blog.phylum.io/2025-trends-pr… #phylumresearch #softwaresupplychainsecurity #2025trends #CEOinsights

Phylum_IO Profile Picture

Phylum @Phylum_IO

10 months ago

"In Q3 2024, Phylum identified 465,897 malicious packages in the software supply chain open source ecosystem." Read the latest Evolution of Software Supply Chain Security Report via the Phylum Research Team - blog.phylum.io/q3-2024-evolut… [7 min read] #DevOps #CISO #opensourceecosystem

Phylum_IO Profile Picture

Phylum @Phylum_IO

10 months ago

Q3 2024 Evolution of Software Supply Chain Security Report via the Phylum Research Team - blog.phylum.io/q3-2024-evolut… #malciouspackages #npm #opensourceecosystem #DevOps #CISO #AppSec #acceptableuse #softwaresupplychainsecurity #CyberSecurityAwarenessMonth #CyberSecurity

Phylum_IO Profile Picture

Phylum @Phylum_IO

10 months ago

🎃 Trick or treat? #Malware authors opted for the former with a series of malicious #npm packages targeting #Puppeteer users in an ongoing #typosquat campaign! blog.phylum.io/supply-chain-s… #nodejs #npm #ethereum #opensource #javascript #cryptocurrency #cybersecurity #infosec

Phylum_IO Profile Picture

Phylum @Phylum_IO

11 months ago

Subscribe to Phylum Research ⚔️ New Report Coming Soon 🔔 blog.phylum.io/subscribe-to-t… #opensource #techcommunity #opensourceecosystem #softwaresupplychain #devops #CISO #AppSec #acceptableuse #techcommunity #developercommunity

Phylum_IO Profile Picture

Phylum @Phylum_IO

11 months ago

Have you ever had your private #crypto keys stolen? #Malware authors have published forks of the popular Ethers library that exfiltrate private keys & give attackers #SSH access to infected machines. blog.phylum.io/trojanized-eth… #npm #opensource #security #ethereum #cryptocurrency

Phylum_IO Profile Picture

Phylum @Phylum_IO

12 months ago

Phylum For Artifact Repositories and Package Managers blog.phylum.io/phylum-for-art… #opensource #techcommunity #opensourceecosystem #softwaresupplychain #DevOps #CISO #AppSec #acceptableuse #machinelearning #techcommunity #developercommunity

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

🇰🇵☠️ Multiple #NorthKorean state actors continue running #malware campaigns against #npm #developers, stealing credentials and financial assets. blog.phylum.io/north-korea-st… #dprk #moonsleet #contagiousinterview #CyberSecurity #javascript #opensource

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

In the last 6 months, roughly 70% of new #npm packages were #spam. What does this mean for supply chain security? At Black Hat USA? Find us in Startup City booth SC203! #npmjs #node #javascript #typescript #infosec #opensource blog.phylum.io/the-great-npm-…

Phylum retweeted
arstechnica Profile Picture

Ars Technica @arstechnica

a year ago

Code sneaked into fake AWS downloaded hundreds of times backdoored dev devices arstechnica.com/?p=2037194

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

We've uncovered #malware hidden in a Microsoft logo JPG, shipping as fake #AWS packages on #npm! 😲 blog.phylum.io/fake-aws-packa… #steganography #opensource #cybersecurity #npmjs #javascript #typescript #SoftwareDevelopment #informationsecurity

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

Advanced threat actors have not let up on their attacks against the software supply chain. We catalog recent attacks from North Korean state actors in our new blog post! #npm #javascript #typescript #malware #cybersecurity #npmjs blog.phylum.io/new-tactics-fr…

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

Supply chain attacks come in all shapes and sizes. Today Phylum Research discusses its discovery of malicious #jQuery files in #npm. blog.phylum.io/persistent-npm… #javascript #opensource #sbom #js #npmjs #node #CyberSecurity

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

#OpenSource libs routinely use polyfill.io. Just bc you arent using the compromised #CDN directly, one of your deps might be. We put together a list of recently released pkgs that ref polyfill.io! #polyfill #polyfillio #malware blog.phylum.io/a-note-about-p…

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

Credential stealer? ✅ Keylogger? ✅ Cryptocurrency stealer? ✅ Phylum uncovers more malicious #npm packages targeting the #Javascript ecosystem. blog.phylum.io/npm-package-ca… #malware #opensource #bitcoin #cryptocurrency #typescript #software #infosec #cybersecurity

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

Nothing is safe. A few days ago, Phylum's automated platform identified a malicious package targeting users of the #gulp toolkit. The package drops a remote access tool and other nastiness. blog.phylum.io/sophisticated-… #javascript #malware #npm #typescript #opensource #gulpjs

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

We've uncovered a package published to #PyPI that is hiding a C2 in a PNG file. This package ships as an improvement to the "requests" library, but actually ships a malicious Go binary! blog.phylum.io/malicious-go-b… #malware #opensource #supplychainsecurity #python #infosec #pip

Phylum_IO Profile Picture

Phylum @Phylum_IO

a year ago

We've uncovered new #malware packages published to #npm that appear to be an evolution on a previous supply chain attack carried out by nation state backed actors ☠ blog.phylum.io/north-korean-s… #npmjs #javascript #supplychainattack #opensource #infosec

Phylum retweeted
mkennedy Profile Picture

Michael Kennedy @mkennedy

a year ago

#457: Software Supply Chain Security with Phylum <— latest episode is out! #python cc @mkennedy and Charles Coggins from @Phylum_IO talkpython.fm/episodes/show/…

Trends for United States

Karen
185 B posts
Iowa
19,2 B posts
San Jose State
1.899 posts
#UFCParis
11,6 B posts
Livingstone
1.957 posts
Duke
20,5 B posts
Duce Robinson
Davey Johnson
5.877 posts
Elizabeth Warren
47,5 B posts
SJSU
1.316 posts
CJ Bailey
Tavares
1.835 posts
Trae Young
Sam Hughes
Thug
126 B posts
Wingo
#iufb
#Caturday
5.819 posts
Rose Garden Club
18,9 B posts
UConn
2.252 posts

You might like

Malware and cybercrime | Cyber Threat Intelligence Analyst at @PRODAFT
3xp0rt
@3xp0rtblog
15K Followers
Technology for a billion Indians. India Stack is a set of open APIs - #Aadhaar, #eKYC, #eSign, #UPI, #DigiLocker, #DEPA, #OCEN to solve India's hard problems.
India Stack
@India_Stack
22K Followers
Red Hat Developer program provides no-cost software subscriptions, tutorials, and career insights to enterprise software developers and architects.
Red Hat Developer
@rhdevelopers
21K Followers
Checkmarx is how the world’s largest enterprises can finally get ahead of application risk without slowing down development. #AlwaysReadyToRun
Checkmarx
@Checkmarx
7K Followers
believes in optimism, but asks several questions @mothfund
Molly Mielke McCarthy
@mollyfmielke
21K Followers
Liquibase Pro brings the database into the same delivery motion as the rest of your stack, with automation, policy guardrails, and CI/CD integration.
Liquibase
@liquibase
2K Followers
The Payment & Trust Infrastructure for Credentials. We're building the Trusted Data & AI Agentic economies. $CHEQ https://t.co/CnkMmfJip8
cheqd.io 🆔
@cheqd_io
38K Followers
The creators of @Kyverno, a @CloudNativeFdn incubating project. #Kubernetes policy, automation, and governance to support security and developer agility.
Nirmata
@NirmataCloud
3K Followers
The easiest, most secure way to access and protect all your infrastructure.
Teleport
@goteleport
4K Followers
Nearform is an independent team of data and AI experts, engineers and designers, who build intelligent digital solutions and capability at pace.
Nearform
@nearform
9K Followers
Continuous Delivery at any scale
Octopus Deploy
@OctopusDeploy
6K Followers
Jakarta EE & MicroProfile compatible, supported application servers for production and containerized deployments.
Payara
@Payara_Fish
10K Followers
El papel no se va a extinguir por culpa de la tecnología, la memoria sí. https://t.co/2YsfwPBjne
Aretha
@aretrips
7K Followers
Just a guy with a laptop and a dream. Design systems + web components + web standards + open source.
Cory LaViska
@cory_laviska
5K Followers
Full spectrum Premier AWS Cloud Native Consulting Partner.
Caylent
@caylentinc
3K Followers