iiinova — where your digital self keeps evolving

Ian Kretz

@ikretz.bsky.social

Security Research @ Datadog

Ian Kretz @ikretz.bsky.social · 21/05/2025

My colleagues and I at @securitylabs.datadoghq.com did a deep-dive on some recently discovered malicious VS Code extensions targeting Solidity developers. Check it out here: securitylabs.datadoghq.com/articles/mut...

securitylabs.datadoghq.com

The obfuscation game: MUT-9332 targets Solidity developers via malicious VS Code extensions | Datadog Security Labs

Analysis of a threat actor campaign targeting Solidity developers via three malicious VS Code extensions

021

Ian Kretz @ikretz.bsky.social · 01/04/2025

My colleague, Sebastian Obregoso, and I had the privilege of writing a guest post for OpenSSF's blog on how we detect malicious open source packages at @securitylabs.datadoghq.com using GuardDog. Check it out here: openssf.org/blog/2025/03...

openssf.org

GuardDog: Strengthening Open Source Security Against Supply Chain Attacks – Open Source Security Foundation

021

Reposted by Ian Kretz

Datadog Security Labs @securitylabs.datadoghq.com · 04/03/2025

Interested in malicious software packages? Our open-source dataset just hit over 5,000 samples of malicious npm and PyPI packages! github.com/DataDog/mali...

021