Seeking advice about discovering malware in open-source project

Hi everyone,

As the title states, I'm looking for some advice. I've discovered a developer who writes these open-source solution (scripts) but hides malware inside the code. I've written up a whole Malware Analysis article that explains how I discovered it, how I went through layers of obfuscated code, and how I eventually got to the actual malicious code. The whole thing is a bit odd; the project was initially released without malware but as it gained popularity, at some …

advice analysis article code cybersecurity developer malware malware analysis obfuscated obfuscated code project scripts solution states written