At the risk of spilling the beans too early... I grew tired of the constant barrage of supply-chain attacks afflicting the open-source community and decided to create a new open-source #malware scanner, named #Litmus.

This is part of a larger vision for intercepting supply-chain attacks, called The #Atomdrift Project. I want to empower everyone, from software marketplaces to teenagers at home, to catch the sorts of attacks we've recently seen against #Trivy and #OpenClaw.

Preview results for the initial #litmus model for malicious supply-chain attack detection from Project #Atomdrift - based on the 10 most recent malware samples from 10 different threat feeds.

I'm EXTREMELY happy with this outcome. There are 26 hours left for the first training run to complete (which excludes these samples), so maybe the full model will knock out another 2-3 more.

Throughout 2026, I've been working hard on a project to make open-source #malware detection useful and tractable: not just for random Win32 or #macOS binaries, but for supply-chain attacks like xzutils or random #OpenClaw fuckery. Tomorrow, I finally get to share my work. #atomdrift