Glassworm poisoned 300+ open-source repos by weaponizing trusted developer infrastructure. Worki...

Summary

The Glassworm threat actor has compromised over 300 open-source repositories by exploiting trusted developer infrastructure. In collaboration with Google and Shadowserver, CrowdStrike successfully disrupted all four command-and-control (C2) channels associated with the botnet, effectively dismantling the operation.

Entities