The rising trend of malicious packages in open source ecosystems

Since the beginning of 2023, Snyk has documented around 6800 malicious packages across PyPI and the npm registry, which requires little to no interaction, almost 860 of which were discovered by us. Starting in the middle of 2022, we observed a surge ...