The OpenSourceMalware Show #18

This episode summarizes multiple active supply-chain and typosquatting malware campaigns: a high-impact compromise of the popular Rust crate arrayref (and related packages) that introduced malicious build-time dependencies and has been linked by Wiz to DPRK infrastructure; the StubMaker campaign spreading identical 22 MB Rust/Go payloads across RubyGems and npm (and possibly PowerShell) via typosquats; a trend of attackers embedding compiled binaries (Rust/Go/C++) in packages; and a PolinRider reinfection wave now using NullReceiver for stealth — all indicating active, multi-ecosystem malware operations with persistence and cross-platform infection vectors.