Open Source Malware on the Rise
Open source malware refers to malicious code hidden within publicly shared software packages on platforms like npm, PyPI, and Hugging Face.
These platforms host free tools used by developers, making them an easy target for criminals seeking to embed harmful code into trusted systems.
Alarming Statistics
Sonatype's latest Open Source Malware Index reports 34,319 malicious open source packages in the third quarter of this year, with a total of 877,522 malicious packages found in the last 6 years.
Attackers are now patient and well organised, using AI to embed malware directly into the tools developers rely on.
This new generation of malware is designed to appear ordinary while stealing data or maintaining long-term access to systems, focusing on stealth rather than noisy attacks.
Author's summary: Open source malware is increasing rapidly.
More News
- Liverpool battling with Tottenham & Man Utd to sign Fofana
- CBS Staffers 'Won't Be Punished' for Not Responding to Bari Weiss
- In pics: The iconic Victoria's Secret Fashion Show returns – Emirates Woman
- Electric Island Expands with Five Shows and a Massive Lineup
- What Arkansas interim football coach Bobby Petrino said on his radio show ahead of Texas A&M game | Whole Hog Sports
- Azerbaijan’s expanding gas network redefines regional energy politics
- Mateusz Gamrot Releases His First Statement Following His Loss To Charles Oliveira
- Wesleyan women blank Wheeling in 3-0 road win
- Who knew that the public would end up supporting striking teachers? Not Danielle Smith and the UCP! - Alberta Politics
- Uncovering untold stories: Finding Lucinda » Sandpoint Reader