Malicious Packages Across Open-Source Registries: Detection Statistics and Trends (Q2 2025)

Malware threats continue to infiltrate open-source software registries. FortiGuard Labs’ Q2 2025 analysis reveals persistent tactics used in malicious NPM and PyPI packages, including credential theft, obfuscation, and install-time payloads. Learn how threat actors exploit OSS and how to stay protected.

      

This article has been indexed from Fortinet Threat Research Blog

Read the original article: