Executive Summary
Google Threat Intelligence Group and Mandiant report a 1,444% increase in malicious open-source packages between 2024 and 2025, driven by actors like UNC6780 (TeamPCP) and North Korean actor MIDNIGHT NEPTUNE. These campaigns increasingly leverage social engineering of maintainers and exploitation of CI/CD triggers, such as GitHub's `pull_request_target`, to inject malicious code into high-traffic ecosystems like PyPI, npm, and Docker Hub.
Technical analysis highlights the emergence of 'AI-accelerated' threats where malicious packages are unwittingly integrated by AI coding agents into legitimate projects. While traditional supply chain compromises targeting proprietary software remain rare and highly targeted—such as the $1.4B cryptocurrency theft by UNC4899—the scale of open-source attacks has reached hundreds of millions of potential downstream victims.
Organizations must pivot from reactive patching to a proactive 'Batten Down' strategy. This includes enforcing package cooldown periods, mandating hardware-backed FIDO2 authentication for developers, and moving away from static personal access tokens toward ephemeral, OIDC-based workload identities to neutralize the impact of compromised automation pipelines.