The OpenSourceMalware Show

Est. audience

100

Apple rating

5 from 1

Cadence

Weekly

Latest

2026-10-28

By

OpenSourceMalware

Based on

12 recent episodes

• Covers: Software supply chain threats, malicious open source packages, credential theft, package ecosystem vulnerabilities, and attacker tradecraft.
• For: Security defenders, DevOps engineers, and software developers managing dependencies and build systems.
• Best for: Security teams and engineers protecting build pipelines from compromised open source dependencies.
• Skip if: General consumer audiences or professionals outside software engineering and cybersecurity.

Start with

• Brotli vulnerability, LiteLLM breached via unrevoked key, poisoned prompt downloads malware: Explains how vendored C code dependencies bypass standard package manifests.
• OVH CLI compromised by Glassworm, compound payloads hide malware, GhostAction copycats PolinRider: Details how compromised maintainer accounts lead to malicious tool releases.
• Tensorlake compromised with mini Shai-Hulud worm, new RubyGems attack: Shows how malicious npm preinstall hooks execute payloads and steal credentials.

Visit

Summarised by AI from 12 recent episodes. Audience estimate and Apple rating from Podscan, checked 2026-11-03; treat the estimate as a guide and ask the show for its own numbers. Prices are not included. Report a mistake.