OpenSourceMalware.com - Community Threat Intelligence
Community-driven threat intelligence. Human-verified supply chain threats from every major open source ecosystem.
opensourcemalware.comCYBERSECURITY AND PRIVACY
GhostAction operators used a targeted GitHub phishing proxy to steal developer credentials and one-time codes using a sophisticated GitHub phishing kit
MOSCOWRUSSIARICK ASTLEYLOGANADEN VELVINDRON
SOFTWARE AND DATA ENGINEERING
OSM has identified a new evolution of the GhostAction attack, which targets GitHub users via malicious CI workflow files and worm-like behaviour
HONG KONGCLAUDECORDAWS
ARTIFICIAL INTELLIGENCE
Tensorlake SDK hit by a Mini Shai-Hulud copycat, fake interview repo plants a rogue .npmrc, and 42 malicious crypto gems on RubyGems
VIRGINIAAUSTINJENN GILEJARED WRAY
SOFTWARE AND DATA ENGINEERING
Learn to reconstruct what actually happened to a compromised repo using timestamps and logs that the person doing the manipulation doesn't control.
GIT HUB
SOFTWARE AND DATA ENGINEERING
A threat actor calling themselves "Ghost Dev" published 42 malicious typo squat packages to the RubyGems registry targeting crypto and web3 packages
RUBY GEMSGRABPY