Sonatype's quarterly Open Source Malware Index reveals 17,954 malicious open source packages.56% of the malicious packages were related to data exfiltration.80% of the packages categorized as sophisticated malware like droppers or code injection malware.The increasing risk of sensitive information being compromised through open source components is emphasized.