United States
Brazil
Canada
Germany
India
Ireland
Japan
Mexico
New Zealand
Philippines
South Africa
United Kingdom
Microsoft Threat Intelligence Podcast
Similar topics: threat and malware
Technology
The OpenSourceMalware Show
by OpenSourceMalware
Today: #152 in Technology, Japan on our combined chart.
Share this ranking
Claiming needs an RSS feed. Contact us.
Chart positions today · Australia
Not on the United States charts we track today.
Not on the United Kingdom charts we track today.
Not on the Canada charts we track today.
Not on the Australia charts we track today.
Not on the Germany charts we track today.
Not on the Brazil charts we track today.
Not on the Mexico charts we track today.
Not on the New Zealand charts we track today.
Not on the Ireland charts we track today.
Not on the India charts we track today.
Not on the Philippines charts we track today.
Not on the South Africa charts we track today.
If you like The OpenSourceMalware Show, try…
Plaintext with Rich
Also in Technology
DISCARDED: Tales From the Threat Research Trenches
Also in Technology
FLOSS Weekly
Also in Technology
DevOps Paradox
Also in Technology
Hacked dAily
Also in Technology
Ranking history · Australia
No ranking history for this show in Australia over the last 7 days.
Latest episodes
-
Tensorlake compromised with mini Shai-Hulud worm, new RubyGems attack
October 9, 2026 · 29 minThis week we talked about: Tensorlake SDK compromise: The npm SDK for Tensorlake, a tool for building and operating AI agents, was compromised with two malicious files. A setup.mjs file fires through a preinstall hook and launches the…
-
Ransomeware arrests, crypto heist, Mac and Baileys malware, DPRK's A/B testing
October 1, 2026 · 32 minThis week we talked about: ShinyHunters and KillSec arrests: Dutch police arrested Pepijn van der Stap, a long-time ShinyHunters member known as Umbreon, on September 16, less than a year after he finished a prison sentence for earlier…
-
ShinyHunters attacks FBI, new WeaselBiscuit malware, Contagious Interview research, and dev FAQs
September 24, 2026 · 47 minThis week we discussed: ShinyHunters vs. the FBI and Cl0p: ShinyHunters claims it stole data from an FBI jobs website through a PeopleSoft zero-day, and it is threatening to leak that data unless the FBI retracts a May FLASH tied to the…
-
OpenAI allegedly attacked RubyGems, PyPI typosquats contain prompt injection, and new Mac malware
September 16, 2026 · 33 minThis week we talked about: New research alleges OpenAI agents were behind the RubyGems attack. A report from independent researchers argues an OpenAI agent swarm is responsible for the GemStuffer campaign, which uploaded hundreds of…
-
Live from Strasbourg & Underground Economy
September 9, 2026 · 47 minJenn and Paul also mark OpenSourceMalware's first anniversary, now tracking close to 200,000 verified threats and over 100,000 IOCs. We also discuss: Mini Shai-Hulud payload resurfaces on npm. A payload from May's Mini Shai-Hulud campaign…
Show 7 more episodesShow fewer episodes
-
TeamPCP members arrested, PolinRider persistence mechanisms defeat remediation attempts
August 27, 2026 · 31 minThis week we talked about: TeamPCP arrests — Australian Federal Police and the FBI arrested Ruben Thomson (21) and Louis Gaebler (23) in Perth on TeamPCP-related charges. The arrests align with the OpenSourceMalware team's longstanding…
-
Popular Rust package compromise, multi-ecosystem typosquatting attack, trends in binary payloads
August 20, 2026 · 39 minThis week we talked about: Rust arrayref compromise tied to DPRK infrastructure: A compromised maintainer account published malicious versions of the arrayref crate, along with internment and append-only-vec, adding a typosquatted build…
-
Hacker Summer Camp trends, npm kills 2FA-bypass tokens, DPRK tradecraft
August 13, 2026 · 32 minThis week we talked about: Hacker Summer Camp trends. Jenn and Paul share observations from Black Hat, DEF CON, and BSides Las Vegas last week, including a maturing AI security conversation that has shifted to focus on where AI still…
-
New npm worm, WEL1DROPPER AI slopsquatting campaign, DPRK NullRider innovation
August 7, 2026 · 25 minThis week we talked about: New npm worm hits Keyv and cacheable. Jared Wray's GitHub account was compromised on Tuesday, and threat actors used it to publish a worm based on the open-sourced Mini Shai-Hulud malware. The worm spread to over…
-
Hugging Face update, GitHub security improvements, DPRK linked to chald/debug, and more new PolinRider research
July 30, 2026 · 42 minThis week we discussed: Update from Hugging Face: Hugging Face published a technical timeline of the OpenAI evaluation agent that breached its production infrastructure between July 9 and July 13, reconstructing over 17,000 attacker…
-
Hugging Face incident, AgentBaiting, RubyGems, CrashStealer, and new PolinRider research
July 24, 2026 · 33 minThis week we talked about: Hugging Face breach and OpenAI's rogue model claim — Hugging Face disclosed a breach with thin details; OpenAI followed up claiming one of its models caused it during an internal security test, escaping its…
-
Dependabot cooldowns, Jscrambler and AsynchAPI compromises, new PolinRider research
July 16, 2026 · 34 minThis week we talked about: GitHub turns on Dependabot cooldown periods by default — A three day cooldown is now applied automatically to all Dependabot version updates, a shift we've been anticipating in the fight against account takeover…
About the show
When you think about malware, you probably envision phishing emails or sketchy websites. But malicious open source - targeting software developers and their build systems - is becoming a top way that threat actors deliver malware. Just one 'npm install' can trigger payloads that steal information and credentials. Software supply chain attacks by state actors, ransomware groups, and freelancers are happening every day.
Hosted by Jenn Gile and Paul McCarty (co-founders of OpenSourceMalware), this podcast explores the latest trends and attacks, and helps defenders understand the tactics needed to prevent their orgs from being the next target.
OpenSourceMalware provides community-driven threat intelligence on malicious open source assets including packages, domains, IP addresses, crypto wallets, and more.
https://opensourcemalware.com/