Submissions from opensourcemalware.com

		PolinRider Is Coming (opensourcemalware.com)
		2 points by 6mile 20 days ago \| past
		Rubygem typosquat campaign deploys Windows stealer (opensourcemalware.com)
		2 points by 6mile 29 days ago \| past
		North Korea NullReceiver Hides Malware in NPM (opensourcemalware.com)
		2 points by 6mile 43 days ago \| past \| 1 comment
		NPM Implements Pre-Publication Malware Scanning, but Will It Work? (opensourcemalware.com)
		2 points by jruohonen 46 days ago \| past
		Lazarus Group Using Git Hooks to Hide Malware – Open-Source Malware Blog (opensourcemalware.com)
		5 points by vinnyglennon 53 days ago \| past
		Cybersecurity Startup Publishes Infostealers to NPM (opensourcemalware.com)
		2 points by ledoge 67 days ago \| past \| 1 comment
		North Korean Hackers Compromise Go and PHP Packages (opensourcemalware.com)
		11 points by 6mile 68 days ago \| past \| 1 comment
		The Software Supply Chain Malware Landscape: January – May 2026 (opensourcemalware.com)
		3 points by jruohonen 87 days ago \| past
		NPM attack targets Zapier and security tool browser extensions (opensourcemalware.com)
		5 points by 6mile 88 days ago \| past \| 1 comment
		Microsoft Compromised Again. Shuts Down Azure Function GitHub Actions (opensourcemalware.com)
		49 points by 6mile 3 months ago \| past \| 2 comments
		TeamPCP compromises NPM maintainer with over 540 packages (opensourcemalware.com)
		2 points by speckx 3 months ago \| past
		More live NPM packages attributed to Axios threat actors (opensourcemalware.com)
		3 points by 6mile 3 months ago \| past \| 1 comment
		Lazarus Group Uses Git Hooks to Hide Malware (opensourcemalware.com)
		4 points by speckx 4 months ago \| past
		Popular Kubernetes Networking Project Antrea Compromised (opensourcemalware.com)
		3 points by 6mile 4 months ago \| past \| 1 comment
		Popular Kubernetes Networking Project Antrea Compromised (opensourcemalware.com)
		2 points by 6mile 4 months ago \| past
		Intercom-client NPM package and lightning PyPI packages compromised (opensourcemalware.com)
		2 points by 6mile 4 months ago \| past \| 1 comment
		Bitwarden CLI NPM package has been compromised (opensourcemalware.com)
		16 points by 6mile 4 months ago \| past \| 1 comment
		Stardrop Supply Chain Attack Targets Venture Capital Firms, Luxury Brands (opensourcemalware.com)
		3 points by jruohonen 5 months ago \| past
		Aquasecurity/Trivy GitHub Repository and Homebrew Cask Compromised (again) (opensourcemalware.com)
		16 points by mmsc 5 months ago \| past \| 4 comments
		GitHub Accounts Compromised (opensourcemalware.com)
		13 points by 6mile 6 months ago \| past \| 2 comments
		Neutralinojs developer framework compromised with malware (opensourcemalware.com)
		1 point by 6mile 6 months ago \| past
		Malicious skills targeting Claude Code and Moltbot users (opensourcemalware.com)
		181 points by 6mile 7 months ago \| past \| 87 comments
		New DPRK Malware Uses Microsoft VSCode Dictionary Files (opensourcemalware.com)
		3 points by vinnyglennon 7 months ago \| past \| 2 comments
		Latest Contagious Interview Malware Campaign Abuses Microsoft VSCode Tasks (opensourcemalware.com)
		2 points by 9woc 7 months ago \| past
		VSCode Tasks files used in new malware campaign (opensourcemalware.com)
		4 points by 6mile 9 months ago \| past
		Open Source Malware (opensourcemalware.com)
		1 point by salkahfi 10 months ago \| past