Open Source Malware

https://opensourcemalware.com

1

Named Actors
28

Published Reports
2

Years Active
14

Avg Reports/Year

Named Actors

Polin Rider

Open Source Malware

Contagious Interview

First seen: Mar 2026

Last seen: Sep 2026

Published Reports

Top Tags

Top Actors

Cluster Coverage

2026-09-17

Open Source Malware

WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials

#NPM #WeaselBiscuit

2026-08-25

Open Source Malware

NPM Isn't Prepared For North Korean PolinRider Attack

#PolinRider #NPM #GitHub #NullReceiver

2026-08-14

Open Source Malware

A Developer's Guide to Getting Rid of PolinRider

#PolinRider #GitHub #NPM #PyPI

2026-08-02

Open Source Malware

NullReceiver's Blank Crypto Transfers Solves the Challenges of EtherHiding

#EtherHiding #ContagiousInterview #NPM #NullReceiver

2026-07-31

Open Source Malware

PolinRider Caused Dozens of npm and Go Compromises

#PolinRider #NPM #SupplyChain #GitHub #InvisibleFerret #OmniStealer

2026-07-17

Open Source Malware

ChainVeil and ViteVenom are DPRK’s PolinRider Campaign

#PolinRider #NPM #SupplyChain #ChainVeil #ViteVenom

2026-07-15

Open Source Malware

PolinRider Confirmed Footprint Grows 6.5x Since March

#PolinRider #ContagiousInterview #TasksJacker #GitHub #SupplyChain

2026-07-08

Open Source Malware

PolinRider Jumps the Fence

#PolinRider #SupplyChain #NPM #PyPI #VSCode

2026-06-25

Open Source Malware

The OpenSourceMalware Show #10

#Lazarus #SupplyChain #NPM #PyPI #Cryptocurrency #Podcast

2026-06-18

Open Source Malware

Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier

#Mastra #NPM #SupplyChain #Lazarus #T1195.001 #T1555 #T1105 #T1059.007

2026-06-08

Open Source Malware

Active Malware Campaigns in January-May 2026

#Lazarus #ContagiousInterview #NPM #PyPI #Trend #PolinRider #TasksJacker

2026-06-03

Open Source Malware

The Software Supply Chain Malware Landscape: January - May 2026

#SupplyChain #NPM #PyPI #ContagiousInterview #Trend

2026-05-21

Open Source Malware

The OpenSourceMalware Show #5

#Axios #NPM #ContagiousInterview #TasksJacker #Lazarus #Podcast

2026-05-19

Open Source Malware

Axios attacker strikes again! Three NPM packages have been hiding in plain sight for two months

#Axios #NPM #UNC1069

2026-05-14

Open Source Malware

How malware abuses npm lifecycle scripts and VS Code tasks

#NPM #VSCode #Lazarus #ContagiousInterview #BeaverTail #InvisibleFerret #TasksJacker #Axios

« Back