Open Source Invasion: Malicious Packages Skyrocket 188% in 2025!
Sonatype’s Open Source Malware Index reveals a 188% rise in malicious packages, naming developers as the prime target. With data exfiltration leading the charge, attackers are playing hide-and-seek in plain sight. Even North Korea’s Lazarus Group is in on the action, proving open source is open season for cyber mischief.
Hot Take:
It seems like open source software is the new piñata for hackers, and they’re swinging with the force of a sugar-rushed toddler! With a 188% increase in malicious packages, developers better start wearing helmets while coding. The only thing multiplying faster than these packages is my anxiety about using open source tools!
Key Points:
- 188% annual increase in malicious open source packages reported in Q2 2025.
- Sonatype’s Open Source Malware Index found 16,279 malicious packages in major ecosystems.
- Data exfiltration was the primary goal, accounting for 55% of malicious packages.
- North Korea’s Lazarus Group linked to 107 malicious packages downloaded over 30,000 times.
- Cryptomining malware saw a slight decline, making up 5% of packages in Q2.
Already a member? Log in here