Veracode Buys Package Analysis Technology From Phylum

**Veracode** acquired malicious package analysis, detection, and mitigation technology (and related staff) from **Phylum** to enhance its Software Composition Analysis product, integrating a malicious package database and package management firewall. The company claims improved detection (60% more malicious packages than other vendors) and faster identification of risky open-source dependencies, citing Phylum’s research that uncovered nearly half a million malicious packages, with general availability expected early this year.