Malicious Open Source Packages Surge by 1,444%, AI Threatens to Accelerate Supply Chain Risks
rseroter · x · 2026-08-03
A report by Google Threat Intelligence Group (GTIG) and Mandiant reveals that the number of identified malicious open source software packages grew exponentially from 2024 to 2025, representing a 1,444% increase.
The report highlights that open source supply chain compromises are becoming a major threat due to their efficiency, scale, and stealth. Furthermore, the proliferation of AI technology is expected to accelerate this risk, as attackers can leverage AI to generate and inject malicious code more easily.
Related event: Google Warns of 1444% Surge in Malicious Packages Targeting AI Workflows(3 posts)→
More from Safety
- Untethered iOS 27.0.1 jailbreak demoed on iPhone 18 Pro at Hexacon — jedisct1 · 2026-10-16
- China requires MOFCOM approval to open-source models above 2T params or 10^26 FLOPS — zephyr_z9 · 2026-10-16
- Universal forgery attack breaks Chinese PQC signature Origami using only the public key — matthew_d_green · 2026-10-16
- 400+ researchers sign open letter: AI needs both alignment and containment — ghadfield · 2026-10-16
- Celebrity AI Deepfakes Rack Up Millions of Views as Verified Fan Accounts Spread Fakes — ChuckDBrooks · 2026-10-16
- New Yorker excerpt: Brockman kept asking 'how do we win?' when pitched 2017 AI safety coalition — ben_j_todd · 2026-10-16