Inside the New Wave of OSS Attacks

Open source ecosystems are under sustained attack, and the tactics are getting more targeted, stealthy, and developer-focused. 

In this Threat Research Round-Up, ReversingLabs Threat Researchers break down real-world campaigns uncovered in Q1 2026, including npm packages delivering remote access trojans, malicious VS Code extensions stealing secrets, and NuGet-based attacks targeting financial workflows and developer environments.

Watch for a behind-the-scenes look at how these attacks work, how they evade traditional controls and how your team can leverage Spectra Assure Community like our research team does to detect threats.

Find additional open source threat insights on our Blog: Threat Research