GUARD YOUR CODEBASE: PRACTICAL STEPS AND TOOLS TO PREVENT MALICIOUS CODE

Summary from the TLDR InfoSec newsletter

Apiiro researchers found that targeting specific coding anti-patterns enabled them to detect malicious packages with a 94.3% success rate in Python and 88.4% in npm. They focused on obfuscated code and dynamic code execution and have released Semgrep rules for detection.