FlagThis

References :

• infosec.exchange: Dependence on open-source repositories has sparked a surge in malicious packages infiltrating software products.
• malware.news: Attackers hijack legitimate commands and run malicious code to launch supply chain attacks.
• CSO Online: Open source application packages, including those in Python and JavaScript, have a vulnerability in their entry points that could be used by threat actors to execute malicious code to steal data, plant malware, and more.

Classification:

• HashTags: #OpenSourceSecurity #SupplyChainAttacks #Malware
• Target: Software products
• Type: Malware
• Severity: Major