🧰 OpenSourceMalware.com

The items that name it 4

• Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497)
  advisory2026-10-23It is written here as OpenSourceMalware.com (OSM): published research on the Python packages on October 23, 2026; submitting PYSEC entries and a PyPI package mapping for the GitHub advisory.

  OSM

• NPM Isn't Prepared For North Korean PolinRider Attack
  writeup2026-08-25

  the publishing organization's own threat-hunting/research service that tracks PolinRider and alerts maintainers/publishes IOCs

• PolinRider Jumps the Fence to Go, Packagist, npm, PyPI
  writeup2026-07-08

  Platform used to track and tag (#polinrider) compromised GitHub, npm, PyPI, Packagist, and Go packages/accounts; where IOCs can be reported.

• The OpenSourceMalware Show #11
  talk2026-07-02It is written here as OpenSourceMalware.com (OSM).

  Source providing malware and TTP data on threat actors like TeamPCP, offered to government/law enforcement for better indicator data