New Threats in Open Source

The open source ecosystem has just crossed a new red line: we’re no longer dealing with “simple” malicious packages, but with self-spreading worms, AI-orchestrated attacks, and large-scale abuse of OSS infrastructure happening simultaneously.
Luis Rodríguez (Co-Founder & CTO at Xygeni Security) examines how Shai-Hulud and Shai-Hulud 2.0 turned npm into a worm-friendly propagation network, jumping even into Maven Central, how GlassWorm hid executable JavaScript in invisible Unicode with a blockchain-backed C2 and full RAT capabilities, how a real-world espionage campaign used an LLM as the primary operator for reconnaissance, exploitation, and exfiltration, and how massive spam waves like IndonesianFoods exploited funding systems and polluted registries at unprecedented scale.
This isn’t theoretical anymore: every developer machine is now a potential worm propagation point, and every stolen token a lateral-movement catalyst. Dive into the full article “New Threats to the Open Source Ecosystems: Worms, AI-Cooked Malware, and Large-Scale Trust Abuse” to understand where supply chain threats are heading—and what must change in our defensive strategies.

𝐁𝐮𝐢𝐥𝐝 𝐒𝐚𝐟𝐞, 𝐒𝐡𝐢𝐩 𝐒𝐭𝐫𝐨𝐧𝐠.