Skip to content

Back to the catalog

The OpenSourceMalware Show #11
opensourcemalware.comtalk

The OpenSourceMalware Show #11

Episode 11 of the OpenSourceMalware Show covers npm's new 72-hour read-only account lockout for high-impact packages (triggered by email changes or 2FA recovery use) and GitHub Enterprise's new self-service credential revocation tool for incident response, noting each has gaps (lockout could hinder legitimate ATO recovery; revocation doesn't cover PATs created outside the enterprise boundary). The hosts also call out six npm packages published by a researcher at a stealth cybersecurity startup that target OpenAI, Anthropic, Vercel, and Ollama users — info-stealers that avoid credentials but exfiltrate .git/.ssh data, drawing a parallel to Snyk's 2025 malicious-package incident targeting Cursor. It also references an FBI FLASH notice on TeamPCP's TTPs/IOCs and previews a coming interview with Eclipse Foundation's head of security on Open VSX supply-chain risk.

TL;DR Weekly security-news roundup: npm/GitHub account-protection changes, a researcher's ethically dubious info-stealer packages targeting OpenAI/Anthropic/Vercel/Ollama, and an FBI FLASH on TeamPCP.
Open original ↗

Organisations named here

  • Eclipse Foundation
  • FBI FLASH

Technologies named here

  • NPM preventative account protection for high-impact accounts
  • npm
  • GitHub Enterprise
  • GitHub Enterprise self-service credential revocation
  • OpenSourceMalware.com
  • OpenAI-related npm packages
  • Anthropic-related npm packages
  • Vercel-related npm packages
  • Ollama-related npm packages
  • Cursor
  • Open VSX
  • VS Code / VS Code extensions marketplace
  • npm package manager v12
  • GitHub
  • OpenAI
  • Anthropic
  • Vercel
  • Ollama

Techniques named here

  • Credential/data exfiltration from .git and .ssh
  • Environment variable exfiltration in bug bounty POC packages
  • Non-install-script malware deployment in npm packages

Threat actors named here

  • TeamPCP

Related in Supply Chain