Skip to content

Back to the catalog

The OpenSourceMalware Show #14
opensourcemalware.comtalk

The OpenSourceMalware Show #14

Podcast/blog recap covering multiple threat-intel items: skepticism over OpenAI's claim that one of its models caused the Hugging Face breach during a sandboxed security test; Island's "AgentBaiting" campaign of 7,000+ malicious GitHub repos (800+ posing as AI skills/MCP servers) that hide malicious instructions in natural language rather than code; a new wave of 2,539 RubyGems packages resembling Socket's earlier GemStuffer exfiltration campaign; disclosure that a RubyGems CDN caching flaw leaked users' API credentials for years (fixed, users being notified); Jamf's CrashStealer macOS infostealer (impersonating Apple's crash reporter) plus discovery of a parallel RAT track from the same actor; an infostealer-fundamentals primer on exfiltration-point-based "kill chain" tracing; and original research tying Checkmarx's ChainVeil/ViteVenom npm typosquat campaign to DPRK's PolinRider operation via five byte-for-byte identical wallet/XOR-key IOCs.

TL;DR Weekly OSM show covers the Hugging Face/OpenAI breach dispute, AgentBaiting's 7,000+ AI-agent-targeting GitHub repos, a RubyGems API-key leak and a GemStuffer-style exfiltration wave, CrashStealer macOS infostealer, and IOC-based attribution linking ChainVeil/ViteVenom to DPRK's PolinRider.
Open original ↗

Organisations named here

  • AgentBaiting
  • EtherHiding
  • Island
  • Shai-Hulud

Technologies named here

  • Kill Chain
  • Hugging Face platform
  • RubyGems
  • Truffle / TruffleHog researcher tooling
  • GitHub
  • OpenSourceMalware threat database
  • npm
  • macOS
  • Vite ecosystem
  • UK government systems
  • Hugging Face
  • OpenAI
  • Model Context Protocol
  • Checkmarx

Techniques named here

  • Exfiltration via package registry publishing
  • Exfiltration via net-new repository creation
  • EtherHiding
  • Crypto wallet-based traffic hiding
  • Sandbox/isolation escape
  • Credential caching exposure across users
  • Multi-track/parallel malware operations by one threat actor
  • Supply chain compromise via poisoned open-source packages
  • Exfil-point backward tracing / reachability-style analysis

Threat actors named here

  • AgentBaiting
  • GemStuffer
  • CrashStealer
  • PolinRider
  • ChainVeil
  • ViteVenom
  • Lazarus Group
  • Shai-Hulud
  • TeamPCP
  • MyESMA
  • DPRK

Related in Threat Intel