Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Fri 25 Sep
WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
The OpenSourceMalware team spends a lot of time looking at malicious npm packages, and after a while you start seeing the same patterns over and over. So when something new and genuinely different shows up, it’ stopping for. That happened this week when we…
Supply chain
Added Tue 21 Jul
ChainVeil and ViteVenom are DPRK’s PolinRider Campaign
On June 16, 2026, Checkmarx Zero published a detailed breakdown of an npm supply chain campaign they named "ChainVeil." It's careful work: they pulled together nine malicious packages, a 77KB remote access trojan (RAT), a four-tier blockchain command channel…
MalwareSupply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.