Here's a New Tool That Scans Open-Source Repositories for Malicious PackagesThe Hacker News·May 3, 03:59 UTC · May 3, 2022Malware42
SapphireStealer: Open-source information stealer enables credential and data theftCisco Talos·Aug 31, 12:00 UTC · Aug 31, 2023Malware142
The Solidity Language open-source package was used in a $500,000 crypto heistKaspersky Securelist·Jul 10, 11:00 UTC · Jul 10, 2025Malware42
Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain AttackThe Hacker News·Oct 6, 08:35 UTC · Oct 6, 2023Malware42
Global Threat Map: Open-source real-time situational awareness platformHelp Net Security·Feb 4, 00:00 UTC · Feb 4, 2026Malware42
Cryptomator: Open-source cloud storage encryptionHelp Net Security·Aug 28, 00:00 UTC · Aug 28, 2024Malware42
Hackers modify open-source ‘SapphireStealer’ malware, leading to multiple variantsThe Record·Aug 31, 19:56 UTC · Aug 31, 2023Malware42
Brutus: Open-source credential testing tool for offensive securityHelp Net Security·Feb 13, 00:00 UTC · Feb 13, 2026Malware42
Microsoft releases open-source CodeQL queries to assess Solorigate compromiseSecurity Affairs·Feb 26, 17:36 UTC · Feb 26, 2021Malware42
GhostContainer backdoor for Exchange serversKaspersky Securelist·Jul 17, 08:00 UTC · Jul 17, 2025MalwareCVE-2020-068847
Researchers Uncover 7000 Malicious Open Source PackagesInfosecurity Magazine·Apr 12, 10:30 UTC · Apr 12, 2023Malware42
Open-source malware zeroes in on developer environmentsHelp Net Security·Jan 29, 00:00 UTC · Jan 29, 2026Malware42
RIFT: New open-source tool from Microsoft helps analyze Rust malwareHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2025Malware142
Open-source tool Sage puts a security layer between AI agents and the OSHelp Net Security·Mar 9, 00:00 UTC · Mar 9, 2026Malware42
Malicious npm Packages Used to Target GitHub Developer SSH KeysInfosecurity Magazine·Jan 23, 17:00 UTC · Jan 23, 2024Malware142
VisibleV8: Stealthy open source tool for monitoring JavaScript in the wildHelp Net Security·Oct 24, 00:00 UTC · Oct 24, 2019Malware42
PRevent: Open-source tool to detect malicious code in pull requestsHelp Net Security·Feb 24, 09:13 UTC · Feb 24, 2025Malware42
Multiple Threat Actors Deploying Open-Source Rafel RAT to Target Android DevicesThe Hacker News·Jun 24, 05:07 UTC · Jun 24, 2024Malware42
Building a Comprehensive Open Source Record on MalwareRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Malware42
Distributing Malware By Becoming an Admin on an Open-Source ProjectSchneier on Security·Jan 27, 14:37 UTC · Jan 27, 2020Malware42
Podcast: An Open Source Search Engine to Replace Google404 Media·Feb 14, 14:00 UTC · Feb 14, 2024Malware42
MBRFilter — Open Source Tool to Protect Against 'Master Boot Record' MalwareThe Hacker News·Oct 20, 16:33 UTC · Oct 20, 2016Malware42
Highly invasive backdoor snuck into open source packages targets developersArs Technica · Security·Nov 8, 18:27 UTC · Nov 8, 2023Malware42
Octopus Scanner Malware: open source supply chain attack via NetBeans projects on GitHubSecurity Affairs·May 29, 12:22 UTC · May 29, 2020Malware42
Hackers Use NuGet Packages to Target .NET DevelopersInfosecurity Magazine·Mar 21, 16:30 UTC · Mar 21, 2023Malware42
LofyGang Group Linked to Recent Software Supply Chain AttacksInfosecurity Magazine·Oct 7, 18:00 UTC · Oct 7, 2022Malware42
LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoaderCisco Talos·May 30, 12:01 UTC · May 30, 2024Malware42
Malicious Npm Package Uses Typosquatting, Downloads MalwareInfosecurity Magazine·Feb 10, 16:00 UTC · Feb 10, 2023Malware42
Open-source Rafel RAT steals info, locks Android devices, asks for ransomHelp Net Security·Jun 24, 00:00 UTC · Jun 24, 2024Malware42
Open-Source Xeno RAT Trojan Emerges as a Potent Threat on GitHubThe Hacker News·Feb 28, 03:29 UTC · Feb 28, 2024Malware42
7 Open-Source Malware Analysis Tools You Should Try OutHelp Net Security·Aug 30, 10:01 UTC · Aug 30, 2022Malware42
AhMyth Android RAT, another open source Android RAT Tool available on GitHubSecurity Affairs·Oct 23, 09:38 UTC · Oct 23, 2017Malware42
Self-propagating malware poisons open source software and wipes IranArs Technica · Security·Mar 24, 12:38 UTC · Mar 24, 2026Malware42
Project TajMahal – a sophisticated new APT frameworkKaspersky Securelist·Apr 10, 03:10 UTC · Apr 10, 2019Malware42
Malware report for Q3 2024: threat overviewKaspersky Securelist·Nov 29, 10:45 UTC · Nov 29, 2024Malware42
Hackers Flood NPM with Bogus Packages Causing a DoS AttackThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2023Malware42
Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat MalwareThe Hacker News·May 19, 12:13 UTC · May 19, 2023Malware142
Toptal GitHub Breach Exposes 73 Repositories and Injects Malware into 10 npm PackagesThe Hacker News·Aug 6, 10:50 UTC · Aug 6, 2025Malware42