#credentialstealingmalware — Public Fediverse posts

GitHub Repos Targeted in 5,500+ Malicious Commits

A shocking new campaign, dubbed Megalodon, has injected malware into over 5,500 GitHub repositories, putting sensitive credentials and tokens at risk of being stolen. This alarming attack highlights the growing threat of supply chain attacks, with experts warning that this could be just the beginning.

https://osintsights.com/github-repos-targeted-in-5500-malicious-commits?utm_source=mastodon&utm_medium=social

#SupplyChain #MaliciousCommits #CredentialstealingMalware #CicdPipeline #Megalodon

Malware Targets TanStack npm Packages in Supply Chain Attack

Malware attackers have infiltrated the TanStack npm packages, modifying 84 artifacts in a supply chain attack that could compromise major developer ecosystems. The malicious code, aimed at stealing credentials, was published across 42 packages on May 11, with some, like @tanstack/react-router, downloaded over 12 million times…

https://osintsights.com/malware-targets-tanstack-npm-packages-in-supply-chain-attack?utm_source=mastodon&utm_medium=social

#SupplyChainAttack #Tanstack #Npm #MalwareOperations #CredentialstealingMalware