Thats why its important to inspect the code. Either do it yourself or send it to virustotal, socket dev or Snyk
2026-11-09 10:07:47
0
Tella :
It's not Jason but JSON =Java Script Object Notation
2026-09-21 03:49:21
7
Edwin Si'Funda :
Jason Statham?
2026-11-09 20:51:10
0
randomuser1737482 :
This is why I use vim
2026-09-17 15:38:14
413
alex :
i totally would have fell for that whitespace trick 😭😭😭
2026-09-19 14:52:22
452
MutinyX :
I don’t get why Microsoft and Apple haven’t made it easy to setup seamless sandboxes yet.
2026-09-16 21:28:29
445
Qusay 🍉 :
ppl should be more careful with git repos
2026-09-18 19:55:04
241
StressOnKnees :
emacs and vim users grinning after hearing this
2026-09-17 16:03:36
110
Kenny Robinson :
that's useful info
2026-09-16 17:52:43
426
Hack Smile :
why does github allow it on their platform?
2026-09-21 09:15:57
32
skidedddle :
F yeah opensourcemalware on the timeline i love it!
2026-09-16 22:49:48
300
Vilagussy :
i get it that it’s a virus but why is it from north korea?
2026-09-17 16:55:08
0
Antonio Martínez :
How do you identify that the malware is coming from north korea?
2026-09-18 15:04:44
46
Plimbo male :
Hey, just wanted to say thanks for making these videos. I work in InfoSec and they’re really helpful for staying informed.
2026-09-20 02:01:31
22
Matty :
Jokes on DPRK I don’t know how to use GitHub. The only thing I know about it is the name GitHub.
2026-09-19 01:43:58
60
stan :
Thank you for sharing this public. I showed the same to our internal dev team as awereness training about 2 weeks ago.
2026-09-20 11:08:49
57
Elvis Jagger :
task.allowAutomaticTasks patched in Jan 2026 to be off by default, and it won't run on untrusted workspaces, so you only get infected if you run the task yourself or change it to run by default
2026-09-19 22:13:15
25
observer ward :
Learn neovim or emacs boys
2026-09-18 13:39:47
15
KernelKhaos :
This is why MS Word is the best IDE
2026-09-30 09:20:47
10
Olu :
Signed commits solve some of these issues, the malware affects your repos by rewriting commit history and force pushing..
It's also not just north Korea, at allll
2026-09-19 12:45:37
6
henry-gsv :
oh shit I use vs code for all my projects and love experimenting w random GitHub projects. I guess I should use a more secure editor?
2026-09-16 18:03:19
50
techfun :
So what made you accuse DPRK? You could have said anyone can use it but you intentionally mentioned DPRK. But you gave no evidence or reason to believe that DPRK is using it and others are not.
2026-09-18 19:59:08
47
To see more videos from user @opensourcemalware, please go to the Tikwm
homepage.