Hunting software supply chain malware
In this podcast episode, OpenSourceMalware founder Paul McCarty joins James Wilson to explain how researchers find and analyse malicious packages, GitHub repositories and developer tools. Paul walks James through static analysis, deobfuscation and reconstructing multi-stage kill chains to identify what attackers are trying to steal. They also discuss how LLMs make malware development easier while introducing operational security mistakes. The pair examine DPRK tradecraft, blockchain-based payload delivery and what Paul calls Pollen Rider, which can reinfect developers through their own repositories. Show notes
Embed this episode
No transcript yet.
Frequently asked questions
How long is this episode of Risky Business Features?
This episode is 1 hour and 15 minutes long.
When was this Risky Business Features episode published?
This episode was published on September 11, 2026.
Can I download this Risky Business Features episode?
Yes. Use the download control on the episode player to save the publisher-provided media file.