OpenSourceMalware

A threat actor published more than 700 malicious packages to the npm registry over 48 hours, using AI-generated typo-squatted names to deliver a cross-platform RAT and infostealer. The packages, such …

The OpenSourceMalware Show #12 featured an interview with Mikael Barbero, Head of Security at Eclipse Foundation, on Open VSX security, and discussed new PolinRider research showing North Korea's auto…

Microsoft confirmed that 73 of its cryptographically verified open source packages were compromised last week, embedding credential-stealing malware that activated when developers opened them in AI co…