The OpenSourceMalware Show #14

Weekly OpenSourceMalware roundup covering a Hugging Face breach (with contested OpenAI involvement), AgentBaiting — thousands of malicious GitHub repositories targeting AI agents and embedding natural-language instructions, a wave of RubyGems packages resembling the GemStuffer exfiltration campaign plus a long-standing RubyGems API-key caching leak, CrashStealer — a macOS infostealer with additional RAT tracks, and research linking ChainVeil/ViteVenom to DPRK PolinRider via shared byte-for-byte IoCs; the episode highlights supply-chain risks, novel exfiltration channels (gems, blockchain memo fields), and rapidly evolving attacker TTPs.