Paul McCarty
Why conventional SCA, SAST, and EDR tools fail against malicious npm packages and how attackers exploit registries.
npmsoftware-supply-chainopen-source-malware+2
Paul McCarty
5 talks in the archive.
Filters+
Loading filters…
1–5 of 5 talks · loading…
BSides Canberra 2025·27 min
Paul McCarty
Paul McCarty examines Panda Mirror: How the Chinese CCP manipulates NPM to horde malware.
pandamirrorchinese+3
CrikeyCon·26 min
Paul McCarty
Engineers explore architecture and security mechanisms for 2021 - Paul McCarty - What the Solarwinds hack should tell us about software development.
paulmccartysolarwind+1
OWASP Foundation·48 min
Paul McCarty
Paul McCarty investigates Hacking the software supply chain one developer at a time.
supply-chainsoftware-supply-chainsupply+2
AUSCERT·30 min
Paul McCarty
Paul McCarty - Why I created OpenSourceMalware (right here on the Gold Coast!).
paulmccartycreated+1