Software supply chain attacks through malicious packages have become one of the fastest-growing threat vectors, yet most CTI programs lack visibility into these critical attack surfaces. This webinar bridges the gap between software supply chain security and traditional CTI, demonstrating how to extract actionable threat indicators from package ecosystems. Join us to see how malicious packages in software package ecosystems like NPM and PyPI create opportunities for cyber threat intelligence and for a hands-on demonstration of OpenSourceMalware.com: a community project to share intel on malicious packages.
What you’ll learn:
- How malicious packages operate: Understanding endpoint-targeted vs. application-targeted malware.
- Extracting traditional CTI indicators (IPs, domains, hashes) from package-based threats and identifying attacker TTPs and behavioral patterns in package ecosystems.
- Practical demonstration of OpenSourceMalware.com for threat hunting and intelligence gathering.
This webinar is tailored to CTI analysts, threat hunters, security operations teams, and security engineers looking to expand their threat intelligence capabilities into the software supply chain domain.
Webinar: From malicious packages to actionable intelligence with OpenSourceMalware
Learn how to extract actionable threat indicators from package ecosystems.
