The Open Source Malware Index for Q1 2025 reveals alarming trends in malware, with 56% of identified threats aimed at data exfiltration, a dramatic rise from 26% in Q4 2024. Furthermore, there was a notable increase in crypto-mining malware, now comprising 7% of malicious packages. Sonatype successfully blocked over 20,000 attacks, heavily targeting financial services and government sectors. The index highlights a worrying preference for more sophisticated malware types, with 80% of logged packages indicating a move towards advanced forms like droppers and code injection malware.
56% of malware discovered in Q1 2025 was related to data exfiltration, designed to harvest sensitive data from infected systems.
Sonatype said it helped block more than 20,000 open source malware attacks in Q1 2025, with 66% at financial services companies.
Collection
[
|
...
]