The OpenSourceMalware Show #11
NPM account lockout protection, GitHub Enterprise credential revocation, researcher-deployed malware, and an FBI notice on Team PCP
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
BLOG
OpenSourceMalware Blog
Security research and threat intelligence on open-source supply-chain attacks.
-
-
The OpenSourceMalware Show #10
Version sandwiching, blockchain C2 reuse, cross-ecosystem attacks, dynamic imports, and payload splitting
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
The OpenSourceMalware Show #9
Mastra compromise, agentjacking, and malware mythbusting
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier
A malicious transitive dependency hit 140+ npm packages, with tradecraft matching the Axios compromise
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
The OpenSourceMalware Show #8
MSFT unpublished 73 repos, VS Code extension cooldowns, npm v12, Miasma open-sourced, and package firewalls
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
The Pros and Cons of NPM v12's Security Improvements
NPM package manager (v12) closes serious security gaps, including making install scripts opt-in, but implementing it may not have the intended outcomes.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Active Malware Campaigns in January-May 2026
We surfaced three trends about malware: npm and PyPI growing at similar rates, ATOs aren’t the only risk, and threat actors targeted non-developers.
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
Miasma Blight Reaches Microsoft: 73 Repos Disabled in 105 Seconds
A terms of use violation triggered repos for Microsoft and Azure to go down for investigations - signs point to Miasma npm malware
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
The Software Supply Chain Malware Landscape: January - May 2026
We surfaced three trends about malware: npm and PyPI growing at similar rates, ATOs aren’t the only risk, and threat actors targeted non-developers.
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
The OpenSourceMalware Show #7
Miasma npm worm targets Red Hat via trusted publishing abuse, OpenSourceMalware 2026 threat data, and the gray-area Moika campaign.
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
The OpenSourceMalware Show #6
OSV false positives, Crowdstrike takedown of Glassworm infra, and MSFT nukes a researcher
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
The OpenSourceMalware Show #5
npm staged publishing, DPRK's Axios-linked packages, TeamPCP's biggest npm maintainer compromise yet, and how a poisoned VS Code extension led to a GitHub emplo
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
TeamPCP Compromises AntV and 322 Other NPM Packages
TeamPCP compromised npm maintainers atool and prop, republishing 324 packages including the AntV suite across 645 versions. IOCs and remediation steps inside.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Axios Attacker Behind Three More Malicious NPM Packages
Three malicious NPM packages connected to the March Axios compromise have been quietly harvesting developer credentials since early April
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
How Malware Abuses NPM Lifecycle Scripts and VS Code Tasks
npm lifecycle scripts and VS Code tasks.json are productivity features that threat actors have learned to weaponize triggering malware
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
The OpenSourceMalware Show #4
RubyGems bot attack, ShinyHunters ransom Canvas, and the latest on Mini Shai-Hulud.
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
TeamPCP Hits TanStack, OpenSearch, and Mistral with Mini Shai-Hulud
TeamPCP's self-spreading npm worm "Mini Shai-Hulud" has compromised 170 npm packages and crossed into PyPI.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
The OpenSourceMalware Show #3
git hook persistence, Antrea compromise, Dirty Frag, cPanel exploitation, interpreted language malware
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
Lazarus Group Using Git Hooks To Hide Malware
The Contagious Interview and TaskJacker campaigns now hides the stage-2 loader inside git hooks that download InvisibleFerret and Beavertail malware
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
CNCF Project Antrea Compromised in Daring GitHub Attack
The Antrea open-source Kubernetes project was attacked via its Jenkins integration on May 2 by an unknown threat actor who opened a malicious pull request,
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
The OpenSourceMalware Show #2
Lovable and Vercel security incidents, a crazy git push RCE exploit, EDR vs AI agents, and the Mini-Shai-Hulud attack
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
The OpenSourceMalware Show #1
TeamPCP compromises Bitwarden, npm lifecycle scripts, OWASP's npm security cheat sheet
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
Mini Shai-Hulud Weaponizes Tasks.JSON Files
Mini Shai-Hulud is a malicious npm worm by TeamPCP. It weaponizes tasks.json files, a technique first seen in North Korean Lazarus Group campaigns.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Security Anti-Patterns Caused by AI Coding Tools
Agentic platforms like Lovable, Claude, and Codex cause unexpected security anti-patterns
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Stardrop Supply Chain Attack Targets Venture Capital Firms, Luxury Brands, and AI Companies
Dozens of malicious npm packages to targeting AI companies, luxury brands, and venture capital firms.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
PolinRider DPRK Attack Expands Across GitHub
This North Korean attack has compromised 1,951 unique repositories belonging to 1,047 unique owners - a 3x growth since the campaign's discovery
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Velora (formerly ParaSwap) SDK Version 9.4.1 Compromised And Installing Malware
The npm package @velora-dex/sdk version 9.4.1 contains malicious code that automatically downloads and executes a shell script from a remote server when the
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Hundreds of GitHub Repos Compromised By DPRK's PolinRider Campaign
Lazarus Group compromises GitHub repositories by implanting a malicious, obfuscated JavaScript payload.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
The Social Engineering Playbook Attackers Use to Target OSS Maintainers
Account takeovers are some of the most harmful malware campaigns. Many start by compromising a maintainer account through social engineering.
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
Has TeamPCP Pivoted To Using The PureHVNC RAT?
New threat campaign using PureHVNC has been tied to TeamPCP.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
TasksJacker DPRK Attack Compromises GitHub Users Via VS Code Tasks
A technical deep-dive into the next generation of DPRK attacks that borrows from Shai-hulud and Contagious Interview to compromise dozens of GitHub users
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Malicious Transitive Dependency in Axios Affects Millions of Users
The Axios NPM package has been compromised and the maintainer of the project has been locked out of their account. This will go down in history as one of the
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
TeamPCP Supply Chain Campaign: A March 2026 Retrospective
TeamPCP executed a cascading multi-phase supply chain attack that started with a single unrevoked credential stolen from Trivy's CI pipeline.
By cb482791-4ef1-4762-96ad-b0ca4bdd538e ·
-
TeamPCP Hijacks LiteLLM's PyPI Package
TeamPCP compromised the LiteLLM maintainer's PyPI account and published malicious versions that steal credentials from every Python process on the host.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
TeamPCP Defaces Aqua Security’s Internal GitHub Org
TeamPCP compromised the aquasec-com GitHub organization, renaming all 44 repositories and exposing internal source code, CI/CD configs, and knowledge bases.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
GlassWorm Invades GitHub, NPM, VS Code, and Python
The latest Glassworm attack compromised 430+ GitHub projects by leveraging four different ecosystems
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Neutralinojs Compromised In DPRK Attack
DPRK threat actors compromised Neutralinojs as part of a larger attack that utilizes stolen GitHub credentials to force-push backdated malicious commits
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
XPACK Malware Disguises Cryptocurrency Extortion as NPM Package Monetization
A malware campaign weaponizes npm to extort crypto payments from developers during package installation
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Malicious ClawHub Skills Use External Websites to Hide in Plain Sight
Threat actors evolved ClawHub malware by moving payloads to convincing fake websites, allowing them to completely circumvent VirusTotal scans.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Malicious ClawHub Skills Target OpenClaw Users
Malicious ClawdBot skills target ByBit, Polymarket, Axiom, Reddit and LinkedIn, installing malware on unsuspecting OpenClaw user machines.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
DPRK Contagious Interview “Fake Font” Abuses VS Code Tasks
“Lazarus Group's Fake Font campaign abuses VS Code task automation to silently execute BeaverTail malware, delivering the InvisibleFerret backdoor”
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Small Open-Source Maintainers Targeted by VS Code Tasks Malware
At least 21 small OSS maintainers hit in 72 hours via malicious VS Code task configurations
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
A Comprehensive Analysis of DPRK's Contagious Interview
A single NPM package that led us to the Lazarus Groups latest campaign targeting software engineers using fake recruiters on LinkedIn, Fiverr and UpWork.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
DPRK Malware Hiding in Microsoft VSCode Dictionary Files
North Korean threat actors are hiding multi-stage malware droppers in VSCode configuration files, disguised as spell-check dictionaries.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
Elf-Stats NPM Christmas Spam Campaign
This campaign includes 36 individual packages spread across 23 different NPM users.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
DPRK Contagious Interview Malware Weaponizes Microsoft VSCode Tasks
Lazarus Group evolves their developer-focused campaign to hide malware in VS Code tasks.json files
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·
-
IndonesianFoods Worm Publishes 86,000+ Malicious NPM Packages
NPM was flooded with junk packages that waste infrastructure resources, pollute search results, and creates supply chain risks if devs accidentall consume them.
By c0a15726-c5b1-4b0d-85e6-fe15553df9e2 ·