Exploring The Opensourcemalware Show 10
Let's dive into the details surrounding The Opensourcemalware Show 10.
- This week we talked about: GitHub turns on Dependabot cooldown periods by default — A three day cooldown is now applied ...
- This week we talked about: Hugging Face breach and OpenAI's rogue model claim — Hugging Face disclosed a breach with thin ...
- This week we talked about: GitHub's two new account protection features: NPM added a 72-hour read-only lockout for high-impact ...
- In this episode we cover: DPRK Lazarus Group using git hooks: Paul's latest research
- In this episode we covered: Mastra Package Compromise: Threat actors hijacked the entire Mastra npm organization (116 ...
In-Depth Information on The Opensourcemalware Show 10
This week we talk about: DPRK Lazarus Group trends in software supply chain malware: Three active techniques he's observing ... This week we discussed: Update from Hugging Face: Hugging Face published a technical timeline of the OpenAI evaluation ... Welcome to the very first episode of This week we talked about: PolinRider jumps the fence — Paul's research on North Korea's automated repo-hijacking campaign ...
Open source is now under attack by threat actors targeting maintainers, build systems, and package repositories—as seen in ...
That wraps up our extensive overview of The Opensourcemalware Show 10.
