Get a curated view of malicious packages that are published into the open-source ecosystem
The Phylum Threat Feed provides a curated view of malicious packages that are published into the open-source ecosystem. The feed shows timely, high signal threat data that informs organizations of software supply chain attacks that have executed as well as indicators of potential future threats. This high-fidelity data is actionable on its own, and can enrich other findings.
Get automated, software supply chain attack threat data within 30 minutes of a malicious package being published in the open-source ecosystem.
Correlate data with other findings for added context and insights.
See high-fidelity threat data with minimal false positives.
The Phylum App for Sumo Logic provides feed of threat data associated with zero-day software supply chain attacks, including when a malicious package was published, in which ecosystem, hashes, threat indicators, package name and version.
The example dashboard shows a breakdown of correlated threats from Phylum’s threat feed in the local SumoLogic environment. Additionally, it shows a running count of total supply chain threats.
