Solutions
- Platform
  - Checkmarx One
  - API Security
  - ASPM
  - Codebashing
  - Container Security
  - DAST
  - IaC Security
  - SAST
  - SBOM
  - SCA
  - SSCS
- Solutions
- Services
Partners
Company
Resources
Contact Us

Jossef Harush

January 2, 2024
When “Everything” Goes Wrong: NPM Dependency-Hell Campaign – 2024 Edition

November 27, 2023
The Hidden Supply Chain Risks in Open-Source AI Models

August 9, 2023
Popular NuGet Package “Moq” Silently Exfiltrates User Data to Cloud Service

March 2, 2023
CocoaPods Subdomain Hijacked: This is How

December 14, 2022
How 140k NuGet, NPM, and PyPi Packages Were Used to Spread Phishing Links

October 7, 2022
LofyGang – Software Supply Chain Attackers; Organized, Persistent, and Operating for Over a Year

August 14, 2022
Typosquatting Campaign Targeting Python’s Top Packages, Dropping GitHub Hosted Malware with DGA Capabilities

August 3, 2022
Large Scale Campaign Created Fake GitHub Projects Clones with Fake Commit Added Malware

May 27, 2022
GitHub RepoJacking Weakness Exploited in the Wild by Attackers

May 25, 2022
Attacker Caught Hijacking Packages Using Multiple Techniques to Steal AWS Credentials

March 28, 2022
A Beautiful Factory for Malicious Packages

February 8, 2022
Our Response to NPM Account Takeover Attacks – ChainAlert, a Community-Backed Open Source Tool

Follow us

Trusted by

Awards & Recognition

Checkmarx is the leader in application security and ensures that enterprises worldwide can secure their application development from code to cloud. Our consolidated platform and services address the needs of enterprises by improving security and reducing TCO, while simultaneously building trust between AppSec, developers, and CISOs. At Checkmarx, we believe it’s not just about finding risk, but remediating it across the entire application footprint and software supply chain with one seamless process for all relevant stakeholders.

We are honored to serve more than 1,800 customers, which includes 40 percent of all Fortune 100 companies including Siemens, Airbus, SalesForce, Stellantis, Adidas, Wal-Mart and Sanofi.

Platforms
- Checkmarx One
- API Security
- ASPM
- Codebashing
- Container Security
- DAST
- IaC Security
- KICS
- SAST
- SBOM
- SCA
- SSCS
Solutions
Services
Resources
- Blog
- Case Studies
- Documentation
- E-books
- Events
- Glossary
- Reports
- Videos
- Webinars
- White Papers
Compare To
- Fortify
- GitHub
- GitLab
- Synopsys
- Snyk
- Veracode
Company
- About Us
- Awards
- Careers
- Customers
- Events
- Leadership
- News
- Press Releases
- Trust & Security
Connect
- Contact Us
- Support Portal

©2024 Checkmarx Ltd. All Rights Reserved. iISO/IEC 27001:2013 Certified

Privacy Policy
Terms of Use