
ossprey
@osspreysecurity
We Stop Malicious Open Source Code http://www.ossprey.com
New Blog: Nx Package Compromise Malware hidden in recent Nx releases created a repo called s1ngularity-repository in developers’ GitHub accounts exposing SSH keys, API tokens, and even wallet files. Read the breakdown: ossprey.com/blog/nx-packag… #SupplyChainSecurity #npm #OSS

New from Ossprey: PyPI is cracking down on domain resurrection attacks by invalidating expired maintainer domains. 1,800 accounts un-verified in just 2 months. Time to check if your dependencies rely on revoked maintainers. Full blog: ossprey.com/blog/pypi-doma… #OpenSource
Now at #OSSummit, @bagder is absolutely rocking the stage. The room is laughing hard from all his examples of the life of an open source maintainer. But really, we should all be crying. Example: 47 car brands rely on cURL. Not one contributes back the project. #OSSummit #OSSEU

What a start to #OSSummit Europe! 🎉 Inspiring talks, buzzing sessions, and endless hallway conversations showed the power of the #OpenSource community in action. The energy is unmatched — and it’s only Day 1!




#OSSummit and #OpenSSFCommunity Day Europe are almost here. What’s on your “don’t miss” list? Visit the #OpenSSF booth B33 for demos, AMAs, and practical insights from the people building secure-by-design tools for open source. Read the highlights: openssf.org/blog/2025/08/2…

🚨 North Korea infiltrated 100+ U.S. companies using fake remote workers—stealing data, crypto & defense tech. They even used AI to forge voices, documents & LinkedIn profiles. The worst part? Some were praised as top talent. Full story → thehackernews.com/2025/07/us-arr…
Cryptocurrency company Binance has issued guidance on its blog for how to mitigate threats to personnel following a recent increase in actions targeting high profile individuals in the sector binance.com/en/blog/securi…?
See our latest blog post for a technical deep dive into what happened and what it means for engineers and defenders. 👉 ossprey.com/blog/tj-action… Let us know your thoughts or what your team is doing to reduce this kind of risk. #supplychainsecurity #BirdsOfCyber

Happy to announce that we have graduated from the Plexal Grow Cyber Security Accelerator! With over 60 sessions and countless insights, you can learn more about our experience with Plexal here: ossprey.com/blog/cyber-run… #SupplyChainSecurity #OpenSourceSecurity #CyberSecurity

United States Xu hướng
- 1. Chiefs 110K posts
- 2. Branch 34.4K posts
- 3. Red Cross 44.6K posts
- 4. Mahomes 33.9K posts
- 5. Binance DEX 5,146 posts
- 6. #LaGranjaVIP 76.9K posts
- 7. #TNABoundForGlory 57.2K posts
- 8. #LoveCabin 1,272 posts
- 9. Rod Wave 1,459 posts
- 10. Bryce Miller 4,539 posts
- 11. LaPorta 11.2K posts
- 12. Dan Campbell 3,981 posts
- 13. Goff 13.8K posts
- 14. #OnePride 6,437 posts
- 15. Kelce 16.8K posts
- 16. Tom Homan 78.9K posts
- 17. Matan Angrest 10.1K posts
- 18. Eitan Mor 10.9K posts
- 19. #DETvsKC 5,020 posts
- 20. Omri Miran 11.1K posts
Something went wrong.
Something went wrong.