# malware prevention

Published articles for malware prevention.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware"

DevFeed: [The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware"](<https://devfeed.tech/articles/the-expanding-threat-landscape-chainguard-now-scans-source-code-for-traditional-malware-and-greyware-13252.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-expanding-threat-landscape-chainguard-now-scans-source-code-for-traditional-malware-and-greyware>)

Published: 2026-06-09T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Code](<https://devfeed.tech/topics/code.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [npm](<https://devfeed.tech/topics/npm.md>), [npm packages](<https://devfeed.tech/topics/npm-packages.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [ecosystems](<https://devfeed.tech/tags/ecosystems.md>), [greyware](<https://devfeed.tech/tags/greyware.md>), [greyware-scanner](<https://devfeed.tech/tags/greyware-scanner.md>), [hardening](<https://devfeed.tech/tags/hardening.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-prevention](<https://devfeed.tech/tags/malware-prevention.md>), [malware-scanner](<https://devfeed.tech/tags/malware-scanner.md>), [npm](<https://devfeed.tech/tags/npm.md>), [npm-packages](<https://devfeed.tech/tags/npm-packages.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [packages](<https://devfeed.tech/tags/packages.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [source](<https://devfeed.tech/tags/source.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>)

### AI overview

Chainguard has introduced a source code scanner that detects traditional malware and "greyware," harmful packages that may perform actions such as credential theft, command interception, API key harvesting, or persistent remote access. The scanner currently protects npm packages, scans more than 100,000 packages daily, and has blocked more than 52,000 packages identified as malware or greyware.

### Source excerpt

Chainguard's new scanner blocks malware and 'greyware' before it reaches developers, protecting 100,000+ packages daily across open source ecosystems.

## Announcing AWS Inspector scanner support for Chainguard Libraries

DevFeed: [Announcing AWS Inspector scanner support for Chainguard Libraries](<https://devfeed.tech/articles/announcing-aws-inspector-scanner-support-for-chainguard-libraries-12874.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/announcing-aws-inspector-scanner-support-for-chainguard-libraries>)

Published: 2025-11-24T00:00:00Z

Content type: news

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard libraries](<https://devfeed.tech/topics/chainguard-libraries.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Python](<https://devfeed.tech/topics/python.md>), [Django](<https://devfeed.tech/topics/django.md>), [Flask](<https://devfeed.tech/topics/flask.md>)

Tags: [amazon-scanner-support](<https://devfeed.tech/tags/amazon-scanner-support.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-inspector](<https://devfeed.tech/tags/aws-inspector.md>), [chainguard-aws-integration](<https://devfeed.tech/tags/chainguard-aws-integration.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [chainguard-libraries-for-python](<https://devfeed.tech/tags/chainguard-libraries-for-python.md>), [chainguard-libraries-for-python-aws](<https://devfeed.tech/tags/chainguard-libraries-for-python-aws.md>), [chainguard-packages](<https://devfeed.tech/tags/chainguard-packages.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-remediation](<https://devfeed.tech/tags/cve-remediation.md>), [django](<https://devfeed.tech/tags/django.md>), [flask](<https://devfeed.tech/tags/flask.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-prevention](<https://devfeed.tech/tags/malware-prevention.md>), [python](<https://devfeed.tech/tags/python.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

### AI overview

Chainguard Libraries for Python now integrates with Amazon Inspector's enhanced scanning for Amazon ECR. The integration provides malware prevention, recognition of Chainguard-remediated CVEs, and a unified view of container and library vulnerabilities across AWS workloads.

### Source excerpt

Chainguard Libraries now integrates with AWS Inspector, bringing proactive malware prevention, CVE remediation, and vulnerability visibility across AWS workloads

## Chainguard Libraries for Python: Now Generally Available with CVE Remediation and Malware Protection

DevFeed: [Chainguard Libraries for Python: Now Generally Available with CVE Remediation and Malware Protection](<https://devfeed.tech/articles/chainguard-libraries-for-python-now-generally-available-with-cve-remediation-and-malware-protection-12967.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-libraries-for-python-now-generally-available-with-cve-remediation-and-malware-protection>)

Published: 2025-10-22T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard libraries for python](<https://devfeed.tech/topics/chainguard-libraries-for-python.md>), [chainguard libraries](<https://devfeed.tech/topics/chainguard-libraries.md>), [Python](<https://devfeed.tech/topics/python.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-language-libraries](<https://devfeed.tech/tags/chainguard-language-libraries.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [chainguard-libraries-for-python](<https://devfeed.tech/tags/chainguard-libraries-for-python.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-remediation](<https://devfeed.tech/tags/cve-remediation.md>), [language-libraries-malware](<https://devfeed.tech/tags/language-libraries-malware.md>), [malware-prevention](<https://devfeed.tech/tags/malware-prevention.md>), [malware-protection](<https://devfeed.tech/tags/malware-protection.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [python](<https://devfeed.tech/tags/python.md>), [python-libraries](<https://devfeed.tech/tags/python-libraries.md>), [secure-python-libraries](<https://devfeed.tech/tags/secure-python-libraries.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

Chainguard Libraries for Python is generally available as a trusted-build distribution of open source Python libraries. It builds packages from source, distributes them through hardened infrastructure, continuously monitors them, and provides malware protection and CVE remediation through backported patches for selected critical and high-severity vulnerabilities.

### Source excerpt

Chainguard Libraries for Python, trusted open source language libraries designed for CVE remediation and malware protection, is now generally available.

## Registries and the npm Breach: Securing the Weakest Link in the Software Supply Chain

DevFeed: [Registries and the npm Breach: Securing the Weakest Link in the Software Supply Chain](<https://devfeed.tech/articles/registries-and-the-npm-breach-securing-the-weakest-link-in-the-software-supply-chain-13208.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/registries-and-the-npm-breach-securing-the-weakest-link-in-the-software-supply-chain>)

Published: 2025-09-10T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [npm](<https://devfeed.tech/topics/npm.md>), [chainguard libraries](<https://devfeed.tech/topics/chainguard-libraries.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Software](<https://devfeed.tech/topics/software.md>)

Tags: [account-takeover](<https://devfeed.tech/tags/account-takeover.md>), [api-keys](<https://devfeed.tech/tags/api-keys.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [chainguard-libraries-for-java](<https://devfeed.tech/tags/chainguard-libraries-for-java.md>), [chainguard-libraries-for-python](<https://devfeed.tech/tags/chainguard-libraries-for-python.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-prevention](<https://devfeed.tech/tags/malware-prevention.md>), [npm](<https://devfeed.tech/tags/npm.md>), [npm-compromise](<https://devfeed.tech/tags/npm-compromise.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>)

### AI overview

The article examines a compromise affecting 20 popular npm packages and explains how package-registry attacks can steal environment variables and API keys, establish production backdoors, compromise CI/CD processes, and evade existing supply-chain controls. It presents Chainguard Libraries as a defense based on going back to source repositories.

### Source excerpt

Chainguard Libraries provides a different and proven defense against supply chain attacks like the recent npm breach. See why preventing malware is important.

## Designing for security and usability: Figma's modern endpoint strategy

DevFeed: [Designing for security and usability: Figma's modern endpoint strategy](<https://devfeed.tech/articles/designing-for-security-and-usability-figma-s-modern-endpoint-strategy-9715.md>)

Original publisher: [Read original article](<https://www.figma.com/blog/figmas-modern-endpoint-strategy/>)

Author: Lamarr Henry

Published: 2025-04-04T00:00:00Z

Content type: article

Language: en

Sources: [Figma Blog](<https://devfeed.tech/sources/figma-blog.md>)

Topics: [Endpoint Security & XDR](<https://devfeed.tech/topics/endpoint-security-xdr.md>), [Security](<https://devfeed.tech/topics/security.md>), [Usability](<https://devfeed.tech/topics/usability.md>), [User experience (UX)](<https://devfeed.tech/topics/ux.md>), [macOS](<https://devfeed.tech/topics/macos.md>)

Tags: [browsers](<https://devfeed.tech/tags/browsers.md>), [endpoint-security](<https://devfeed.tech/tags/endpoint-security.md>), [macos](<https://devfeed.tech/tags/macos.md>), [malware-prevention](<https://devfeed.tech/tags/malware-prevention.md>), [security](<https://devfeed.tech/tags/security.md>), [usability](<https://devfeed.tech/tags/usability.md>), [ux](<https://devfeed.tech/tags/ux.md>)

### AI overview

Figma describes an endpoint security strategy designed around usability. Its Endpoint Security Baseline uses controls such as browser updates, disabled remote login, and prevention of kernel extensions to protect corporate devices while keeping security self-serve and minimizing employee friction.

### Source excerpt

At Figma, security doesn't have to slow you down. We've designed our corporate endpoint security with UX in mind, making it seamless and self-serve.

## Panic! At The Distro: A Study of Malware Prevention in Linux Distributions

DevFeed: [Panic! At The Distro: A Study of Malware Prevention in Linux Distributions](<https://devfeed.tech/articles/panic-at-the-distro-a-study-of-malware-prevention-in-linux-distributions-13202.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/panic-at-the-distro-a-study-of-malware-prevention-in-linux-distributions>)

Published: 2024-12-17T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Linux](<https://devfeed.tech/topics/linux.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [Benchmark](<https://devfeed.tech/topics/benchmark.md>), [dataset](<https://devfeed.tech/topics/dataset.md>)

Tags: [alpine](<https://devfeed.tech/tags/alpine.md>), [benchmark](<https://devfeed.tech/tags/benchmark.md>), [dataset](<https://devfeed.tech/tags/dataset.md>), [debian](<https://devfeed.tech/tags/debian.md>), [distribution](<https://devfeed.tech/tags/distribution.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [linux](<https://devfeed.tech/tags/linux.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-prevention](<https://devfeed.tech/tags/malware-prevention.md>), [open-source-software](<https://devfeed.tech/tags/open-source-software.md>), [reproducible-builds](<https://devfeed.tech/tags/reproducible-builds.md>), [research](<https://devfeed.tech/tags/research.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

Chainguard studies malware prevention in Linux distributions through maintainer interviews and a Linux package malware benchmark dataset. The study reports that most interviewed distributions do not proactively scan repositories, while existing open-source malware scanners often produce false positives.

### Source excerpt

Chainguard wanted to know more about malware prevention in Linux distributions. So we did a study to see what maintainers are doing about it. See the results.