SourceClear

After The Equifax Hack We Examined the Latest Apache Struts Code

Announcing PHP Language Support

We are proud to announce that we are adding language support for PHP. You can now scan your PHP projects…

SGL: Mapping the open-source genome for fun and profit

For a long-time we have known that the current state-of-the-art of vulnerability research in open-source code does not scale. That current state-of-art involves individual security researchers looking at specific bits of code and then…

Delving into the four recent RubyGems vulnerabilities

Exposing External XML Entity Attacks in Android IntelliJ Plugin

Diving into Directory Traversal Vulnerabilities in Open-Source

Open-source Packages with Malicious Intent

Why re-invent the wheel?

This famous saying is what I think of when thinking about third-party code. Package managers such as npm, RubyGems, and Maven make it so easy to share code that has been written between…

Announcing SourceClear x Atlassian JIRA Cloud Integration