The OpenSourceMalware Show #20

OpenSourceMalware episode #20 reports that a previously observed Mini Shai-Hulud payload resurfaced on npm after 111 days and that the PolinRider campaign continues to compromise thousands of GitHub repositories by abusing developer workflows (VS Code tasks, rewritten git history, poisoned config/files). Hosts discuss DPRK-linked activity, the scale and financial motive of these supply-chain attacks, gaps in GitHub/npm pre-publication scanning, detection limitations (hash/YARA shortcomings), and practical developer checks (inspect task files, suspicious fonts/configs) to reduce risk.