Recent studies have found thousands of malware source code repositories on GitHub. For
the first time, we propose to understand the origins and motivations behind the creation of …

Where can we find malware source code? This question is motivated by a real need: there is
a dearth of malware source code, which impedes various types of security research. Our …

Are malicious repositories hiding under the educational label in GitHub? Recent studies
have identified collections of GitHub repositories hosting malware source code with notable …

Does malware lurking in GitHub pose a threat? GitHub is the most popular open source
software website, having 188 million repositories. GitHub hosts malware-related projects for …

How can we find malware source code and establish the similarity, influence, and phylogeny
of these malware? This question is motivated by a real need: there is a dearth of malware …

Security is critical to the adoption of open source software (OSS), yet few automated
solutions currently exist to help detect and prevent malicious contributions from infecting …

One would have thought that hackers would be striving to hide from public view, but we find
that this is not the case: they have a public online footprint. Apart from online security forums …

Attributing a piece of malware to its creator typically requires threat intelligence. Binary
attribution increases the level of difficulty as it mostly relies upon the ability to disassemble …

On GitHub, open-source developers use the fork feature to create server-side clones and
implement code changes separately before creating pull requests. However, such fork …

Open-source, community-driven package repositories see thousands of malware packages
each year, but do not currently run automated malware detection systems. In this work, we …