The OpenSourceMalware Show #21

This episode of the OpenSourceMalware show reviews several active threats: the GemStuffer RubyGems campaign (thousands of spammy packages, suspected OpenAI agent involvement), a Truffle Security finding of a CDN misconfiguration that could leak API keys enabling package uploads, PyPI typosquats from a 'lurves-agent' campaign that deliver a small info-stealer and include prompt-injection, and a typosquatted claude-desktop.com site distributing a signed macOS DMG with malware; it also highlights PolinRider (DPRK) supply-chain activity and urges treating AI agents and signed installers with caution.