The OpenSourceMalware Show

Conversations on malware in open source software and supply chain security AI summary

OpenSourceMalware Visit website › Technology · EN · 29 episodes · latest 2026-11-12

Rank 3465

0 upvotes, 0 downvotes

Embed a widget with this podcast’s standing on your website

What it is about

When you think about malware, you probably envision phishing emails or sketchy websites. But malicious open source - targeting software developers and their build systems - is becoming a top way that threat actors deliver malware. Just one 'npm install' can trigger payloads that steal information and credentials. Software supply chain attacks by state actors, ransomware groups, and freelancers are happening every day.Hosted by Jenn Gile and Paul McCarty (co-founders of OpenSourceMalware), this podcast explores the latest trends and attacks, and helps defenders understand the tactics needed to prevent their orgs from being the next target.OpenSourceMalware provides community-driven threat intelligence on malicious open source assets including packages, domains, IP addresses, crypto wallets, and more.https://opensourcemalware.com/

Publisher’s own description, taken unchanged from the podcast feed.
© 2026 The OpenSourceMalware Show

Listen

Available at these services — the RSS feed works in any podcast app.

Apple Podcasts Spotify

Latest episodes

Keyv and Cachable maintainer talks about ChainDrop attack

2026-11-12 · 1 hr 8 min · Season 1, episode 29

This week we had a special guest on the show: Jared Wray, who is the maintainer of several popular open source projects, including Keyv and Cacheable. In August 2026, he was the victim of an account takeover. A threat…
Trojanized Claude Code extension, Binance and Polymarket thefts, PolinRider dated to 2025

2026-11-05 · 47 min · Season 1, episode 28

This week we talked about: Trojanized Claude Code extension: On October 29, a trojanized Claude Code extension was shipped from Cursor's own mirror of the Open VSX registry. Cursor's mirror can carry different versions…
Brotli vulnerability, LiteLLM breached via unrevoked key, poisoned prompt downloads malware

2026-10-28 · 31 min · Season 1, episode 27

This week we talked about: Brotli vulnerability: The Brotli decoder bug behind Node2Shell reaches far beyond Node, and it's been overshadowed by the hype around PHP2Shell. Google's Brotli C code is usually vendored into…
OVH CLI compromised by Glassworm, compound payloads hide malware, GhostAction copycats PolinRider

2026-10-21 · 42 min · Season 1, episode 26

This week we talked about: OVH CLI compromised by GlassWorm: GlassWorm is back. The Russian threat actor went quiet after its infrastructure was taken down earlier this year, and it resurfaced with malicious versions of…
GitHub security improvements, GhostAction phishes OSS maintainers, and DoJ shuts down DPRK laptop farms

2026-10-15 · 27 min · Season 1, episode 25

This week we talked about: GitHub push attribution: GitHub now shows when the account that pushed a commit is different from the one listed as the committer, which makes faked Git history easier to spot. That could help…
Tensorlake compromised with mini Shai-Hulud worm, new RubyGems attack

2026-10-08 · 29 min · Season 1, episode 24

This week we talked about: Tensorlake SDK compromise: The npm SDK for Tensorlake, a tool for building and operating AI agents, was compromised with two malicious files. A setup.mjs file fires through a preinstall hook…
Ransomeware arrests, crypto heist, Mac and Baileys malware, DPRK's A/B testing

2026-10-01 · 32 min · Season 1, episode 23

This week we talked about: ShinyHunters and KillSec arrests: Dutch police arrested Pepijn van der Stap, a long-time ShinyHunters member known as Umbreon, on September 16, less than a year after he finished a prison…
ShinyHunters attacks FBI, new WeaselBiscuit malware, Contagious Interview research, and dev FAQs

2026-09-24 · 47 min · Season 1, episode 22

This week we discussed: ShinyHunters vs. the FBI and Cl0p: ShinyHunters claims it stole data from an FBI jobs website through a PeopleSoft zero-day, and it is threatening to leak that data unless the FBI retracts a May…
OpenAI allegedly attacked RubyGems, PyPI typosquats contain prompt injection, and new Mac malware

2026-09-16 · 33 min · Season 1, episode 21

This week we talked about: New research alleges OpenAI agents were behind the RubyGems attack. A report from independent researchers argues an OpenAI agent swarm is responsible for the GemStuffer campaign, which…
Live from Strasbourg & Underground Economy

2026-09-09 · 47 min · Season 1, episode 20

Jenn and Paul also mark OpenSourceMalware's first anniversary, now tracking close to 200,000 verified threats and over 100,000 IOCs. We also discuss: Mini Shai-Hulud payload resurfaces on npm. A payload from May's Mini…

Episode details from the publisher’s feed. Playback happens at the publisher.

Publisher details

Oldest episode in feed: 04/2026
Typical length: 35 min
Format: Episodic Newest first, episodes stand alone
Keywords: malware, software development, software supply chain attacks

The OpenSourceMalware Show in the rankings

The best Technology podcasts The best English-language podcasts All rankings ›

For podcasters

Is this podcast yours? Verify it — afterwards you can correct details, get the widget for your website, and we let you know when your podcast is nominated or wins.

Without an account you can use an email address on your show’s own domain — we create the account along the way. The other methods need a login.