The OpenSourceMalware Show

Conversations on malware in open source software and supply chain security KI-Zusammenfassung

OpenSourceMalware Zur Website › Technology · EN · 29 Folgen · zuletzt 12.11.2026

Platz 3465

0 Aufwertungen, 0 Abwertungen

Widget mit der Platzierung dieses Podcasts auf deiner Website einbetten

Worum es geht

When you think about malware, you probably envision phishing emails or sketchy websites. But malicious open source - targeting software developers and their build systems - is becoming a top way that threat actors deliver malware. Just one 'npm install' can trigger payloads that steal information and credentials. Software supply chain attacks by state actors, ransomware groups, and freelancers are happening every day.Hosted by Jenn Gile and Paul McCarty (co-founders of OpenSourceMalware), this podcast explores the latest trends and attacks, and helps defenders understand the tactics needed to prevent their orgs from being the next target.OpenSourceMalware provides community-driven threat intelligence on malicious open source assets including packages, domains, IP addresses, crypto wallets, and more.https://opensourcemalware.com/

Beschreibung des Anbieters, unverändert aus dem Podcast-Feed übernommen.
© 2026 The OpenSourceMalware Show

Anhören

Der Podcast läuft bei diesen Anbietern — der RSS-Feed funktioniert in jeder Podcast-App.

Apple Podcasts Spotify

Neueste Folgen

Keyv and Cachable maintainer talks about ChainDrop attack

12.11.2026 · 1 Std. 8 Min. · Staffel 1, Folge 29

This week we had a special guest on the show: Jared Wray, who is the maintainer of several popular open source projects, including Keyv and Cacheable. In August 2026, he was the victim of an account takeover. A threat…
Trojanized Claude Code extension, Binance and Polymarket thefts, PolinRider dated to 2025

05.11.2026 · 47 Min. · Staffel 1, Folge 28

This week we talked about: Trojanized Claude Code extension: On October 29, a trojanized Claude Code extension was shipped from Cursor's own mirror of the Open VSX registry. Cursor's mirror can carry different versions…
Brotli vulnerability, LiteLLM breached via unrevoked key, poisoned prompt downloads malware

28.10.2026 · 31 Min. · Staffel 1, Folge 27

This week we talked about: Brotli vulnerability: The Brotli decoder bug behind Node2Shell reaches far beyond Node, and it's been overshadowed by the hype around PHP2Shell. Google's Brotli C code is usually vendored into…
OVH CLI compromised by Glassworm, compound payloads hide malware, GhostAction copycats PolinRider

21.10.2026 · 42 Min. · Staffel 1, Folge 26

This week we talked about: OVH CLI compromised by GlassWorm: GlassWorm is back. The Russian threat actor went quiet after its infrastructure was taken down earlier this year, and it resurfaced with malicious versions of…
GitHub security improvements, GhostAction phishes OSS maintainers, and DoJ shuts down DPRK laptop farms

15.10.2026 · 27 Min. · Staffel 1, Folge 25

This week we talked about: GitHub push attribution: GitHub now shows when the account that pushed a commit is different from the one listed as the committer, which makes faked Git history easier to spot. That could help…
Tensorlake compromised with mini Shai-Hulud worm, new RubyGems attack

08.10.2026 · 29 Min. · Staffel 1, Folge 24

This week we talked about: Tensorlake SDK compromise: The npm SDK for Tensorlake, a tool for building and operating AI agents, was compromised with two malicious files. A setup.mjs file fires through a preinstall hook…
Ransomeware arrests, crypto heist, Mac and Baileys malware, DPRK's A/B testing

01.10.2026 · 32 Min. · Staffel 1, Folge 23

This week we talked about: ShinyHunters and KillSec arrests: Dutch police arrested Pepijn van der Stap, a long-time ShinyHunters member known as Umbreon, on September 16, less than a year after he finished a prison…
ShinyHunters attacks FBI, new WeaselBiscuit malware, Contagious Interview research, and dev FAQs

24.09.2026 · 47 Min. · Staffel 1, Folge 22

This week we discussed: ShinyHunters vs. the FBI and Cl0p: ShinyHunters claims it stole data from an FBI jobs website through a PeopleSoft zero-day, and it is threatening to leak that data unless the FBI retracts a May…
OpenAI allegedly attacked RubyGems, PyPI typosquats contain prompt injection, and new Mac malware

16.09.2026 · 33 Min. · Staffel 1, Folge 21

This week we talked about: New research alleges OpenAI agents were behind the RubyGems attack. A report from independent researchers argues an OpenAI agent swarm is responsible for the GemStuffer campaign, which…
Live from Strasbourg & Underground Economy

09.09.2026 · 47 Min. · Staffel 1, Folge 20

Jenn and Paul also mark OpenSourceMalware's first anniversary, now tracking close to 200,000 verified threats and over 100,000 IOCs. We also discuss: Mini Shai-Hulud payload resurfaces on npm. A payload from May's Mini…

Angaben zu den Folgen aus dem Feed des Anbieters. Abspielen beim Anbieter.

Angaben des Anbieters

Älteste Folge im Feed: 04/2026
Typische Länge: 35 Min.
Aufbau: Fortlaufende Folgen Neueste zuerst, Folgen einzeln hörbar
Schlagwörter: malware, software development, software supply chain attacks

The OpenSourceMalware Show in den Bestenlisten

Die besten Technologie-Podcasts Die besten englischen Podcasts Alle Bestenlisten ›

Für Podcast-Betreiber

Gehört dir dieser Podcast? Dann weise es nach — danach kannst du Angaben korrigieren, das Widget für deine Website holen und bekommst Bescheid, wenn dein Podcast nominiert wurde oder gewonnen hat.

Ohne Konto geht es über eine E-Mail-Adresse auf der Domain deiner Sendung — das Konto legen wir dabei an. Die anderen Wege brauchen eine Anmeldung.