Checkmarx launches Supply Chain Threat Intelligence

The software supply chain is increasingly being weaponized by attackers seeking to compromise businesses and steal information. Application security specialist Checkmarx is looking to combat this with the launch of a new product which delivers detailed threat intelligence on hundreds of thousands of malicious packages, contributor reputation, malicious behavior and more. Supply Chain Threat Intelligence offers a number of features including identification of malicious packages by attack type such as dependency confusion, typosquatting, chainjacking and more. There's also analysis of contributor reputation through identification of anomalous activity within open source packages; intelligence on the malicious behavior of packages, including static… [Continue Reading]