The OpenSourceMalware Show #10

This podcast episode summarizes current software supply chain threats, highlighting DPRK Lazarus Group activity (version "sandwiching" to hide malicious versions, reuse of Aptos/Tron/BSC memos as mutable C2, and embedded human-readable campaign tags) and general trends including cross-ecosystem malicious packages (npm/PyPI/VS Code), dynamic imports from external URLs that evade package managers and firewalls, clustered packages with single payload providers, and payload splitting across files or packages—providing defenders with observable TTPs and examples to inform detection and hunting.