CHECKMARX MALICIOUS PACKAGE PROTECTION

Malicious Package & Typo-squat Guard

Heuristic behavioral detection of malicious open-source packages before they execute on developer workstations or CI/CD runners.

Quarantined Malicious Packages

3 Active Interceptions

MAL-01cross-env-load (npm)

BLOCKED & QUARANTINED

Attack Vector: Typo-squat of 'cross-env'

Exfiltrates .env API tokens to dynamic DNS C2 during postinstall script

MAL-02colors-support-extra (npm)

BLOCKED

Attack Vector: Protestware / DoS Payload

Infinite loop triggered if host machine locale is set to targeted geopolitical regions

MAL-03requests-urllib3-patch (PyPI)

BLOCKED & REPORTED

Attack Vector: Account Takeover / Stolen Token

Reverse shell spawned via socket.socket() when import requests is invoked