Ariel articles - 10 total
Cross-platform RAT deployed by weaponized 'requests' clone
Author @lukehinds & @poppysec Initial discovery with Trusty On August 29th,...
NPM packages leveraged for cryptocurrency theft
Author: @poppysec On August 1st, the Trusty threat detection platform alerted us to 4 suspicious...
North Korean State Actors Exploit Open Source Supply Chain via Malicious npm Package
Author: @poppysec The original post can be found here On 22nd July, the Trusty threat detection...
DestroyLoneliness: npm starjacking attack on Roblox Node.js library delivers QuasarRAT
The execution of QuasarRAT would allow the attacker to establish command and control over affected...
Demo: Automating GitHub Repo Configuration and Security with Minder
If you're like many project owners or maintainers, your software project might span tens or...
OpenSSF Case Study: Enhancing Open Source Security with Sigstore at Stacklok
Stacklok was founded in 2023 by Craig McLuckie (co-creator of Kubernetes) and Luke Hinds (creator of...
Blocking unsafe open source dependencies in pull requests with Minder and OSV.dev
Using data from the open source OSV.dev project and other sources, Minder can now block pull requests...
Tutorial: Using Minder to automate management of source code repository configuration and security
Open Source maintainers, if you're tired of trying to make sure every project repo has a security.md...
Demo: Minder, a software supply chain security platform from Stacklok
Automated remediation is a core feature of the Minder platform. We want to help developers catch...
Unlocking secure software distribution with Minder and GitHub Artifact Attestations
Yesterday, GitHub announced an important new security feature called GitHub Artifact Attestations....