Vipyr Security ResearchOpen source supply chain security research, malicious package detection, and takedown coordination.https://vipyrsec.comNovel ELF64 Remote Access Tool Embedded in Malicious PyPI Uploadshttps://vipyrsec.com/research/elf64-rat-malwarehttps://vipyrsec.com/research/elf64-rat-malwareAnalyzing a Linux-targeted malware campaign on the Python Package Index.Thu, 29 Feb 2024 00:00:00 GMTThe Dependency Dilemmahttps://vipyrsec.com/research/dependency-dilemmahttps://vipyrsec.com/research/dependency-dilemmaExamining the cascading effect of software supply chain compromises and their mitigation strategies.Thu, 03 Aug 2023 00:00:00 GMTDragonfly Client Internalshttps://vipyrsec.com/research/dragonfly-client-internalshttps://vipyrsec.com/research/dragonfly-client-internalsDiscussing the internals of our client compute node in the Dragonfly framework.Sat, 22 Jul 2023 00:00:00 GMTNuisance Malwarehttps://vipyrsec.com/research/nuisance-malwarehttps://vipyrsec.com/research/nuisance-malwareDiscussing a persistent threat actor group utilizing automated malware pipelines to productionize malware uploads.Fri, 14 Jul 2023 00:00:00 GMTA Gap in the Armorhttps://vipyrsec.com/research/a-gap-in-the-armorhttps://vipyrsec.com/research/a-gap-in-the-armorExploiting third party dependancies to bypass PyArmor obfuscation.Wed, 12 Jul 2023 00:00:00 GMT