Quasar Linux malware targets DevOps environments

Researchers found QLNX, a stealthy modular Linux malware campaign aimed at developer and DevOps systems.

It can steal credentials, keylog activity, maintain persistence, and act like a rootkit to hide on hosts.

The malware may spread laterally across networks and collect SSH keys, cloud credentials, and other sensitive access data.

Compromising CI/CD and developer environments could expose source code and package channels, raising supply-chain risk.