Gal Benmocha

Alice Klimovitsky, Gal Benmocha, Gili Tikochinski, Tal Moriah

10월 19, 2026

When trusted packages are compromised, malicious code can quickly spread throughout and beyond developer environments. See how Wiz’s supply chain pipeline identifies compromised packages at publication, helping teams detect zero-day supply chain compromises in Wiz Defend before a CVE is published

Hila Ramati, Merav Bar, Gal Benmocha, Gili Tikochinski

11월 24, 2025

Detect and mitigate malicious npm packages linked to the recent Shai-Hulud-style campaign. Over 25,000 affected repositories across ~350 unique users.

Hila Ramati, Gal Benmocha, Danielle Aminov

9월 9, 2025

A deeper look at the npm debug/chalk supply-chain incident: deobfuscating the wallet-hijacking browser interceptor, quantifying the ~2-hour exposure with Wiz telemetry (~99% package prevalence, ~10% malware presence), and unpacking what made it spread so fast.