Crypto mining malware and open source malware packages doubled in Q1 2025

In the first quarter of 2025, crypto mining malware doubled, comprising 7% of nearly 18,000 identified malicious packages, reflecting a significant rise in resource-hijacking incidents within open source environments. The severity of this trend is alarming for developers.

Security experts note that open source malware is evolving rapidly, becoming increasingly sophisticated. Sonatype reported findings of coordinated attacks targeting developers, notably through compromised npm packages designed for cryptocurrency projects.