Blog | ReversingLabs | npm security

September 23, 2022

Threat analysis: Malicious npm package mimics Material Tailwind CSS tool

ReversingLabs has discovered a malicious npm package disguised as the software tool Material Tailwind. Here's an in-depth look at our discovery — and threat analysis. (Updated with MachO executable information.)

September 14, 2022

OpenSSF's npm best practices: A solid first step for supply chain security — but trust issues remain

Here's what you need to know about the new OpenSSF npm security best practices.

npm security

Threat analysis: Malicious npm package mimics Material Tailwind CSS tool

OpenSSF's npm best practices: A solid first step for supply chain security — but trust issues remain

Topics

Special Reports

npm security

Threat analysis: Malicious npm package mimics Material Tailwind CSS tool

OpenSSF's npm best practices: A solid first step for supply chain security — but trust issues remain

Topics

Follow us

SUBSCRIBE

Special Reports