home.social

#maliciouspackages — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #maliciouspackages, aggregated by home.social.

  1. Analyst207 @[email protected] ·

    Mini Shai-Hulud Campaign Targets npm Ecosystem with Malicious AntV Packages

    A large-scale attack has infected hundreds of popular npm packages, including widely-used data visualization and React components, with malicious updates, putting a vast number of projects and applications at risk. The attackers published 639 malicious versions across 323 unique packages in a fast-moving supply chain operation.

    osintsights.com/mini-shai-hulu

    #SupplyChain #MaliciousPackages #NpmEcosystem #Antv #React

    #supplychain #maliciouspackages #npmecosystem #antv #react
  2. Endor Labs @[email protected] ·

    #PhantomRaven is back 👻🐦‍⬛ We found 3 new waves distributing 88 #maliciouspackages (81 still live on npm). Packages look clean, but a hidden URL in package.json pulls credential-stealing malware.
    endorlabs.com/learn/return-of-

    #phantomraven #maliciouspackages
  3. Hacker News @[email protected] ·

    Shai-Hulud Returns: Over 300 NPM Packages Infected

    helixguard.ai/blog/malicious-s

    #HackerNews #ShaiHuludReturns #NPMInfection #Cybersecurity #SoftwareSupplyChain #MaliciousPackages

    #hackernews #shaihuludreturns #npminfection #cybersecurity #softwaresupplychain #maliciouspackages
  4. Hacker News @[email protected] ·

    Shai-Hulud Returns: Over 300 NPM Packages Infected

    helixguard.ai/blog/malicious-s

    #HackerNews #ShaiHuludReturns #NPMInfection #Cybersecurity #SoftwareSupplyChain #MaliciousPackages

    #hackernews #shaihuludreturns #npminfection #cybersecurity #softwaresupplychain #maliciouspackages
  5. Hacker News @[email protected] ·

    Shai-Hulud Returns: Over 300 NPM Packages Infected

    helixguard.ai/blog/malicious-s

    #HackerNews #ShaiHuludReturns #NPMInfection #Cybersecurity #SoftwareSupplyChain #MaliciousPackages

    #hackernews #shaihuludreturns #npminfection #cybersecurity #softwaresupplychain #maliciouspackages
  6. Hacker News @[email protected] ·

    Shai-Hulud Returns: Over 300 NPM Packages Infected

    helixguard.ai/blog/malicious-s

    #HackerNews #ShaiHuludReturns #NPMInfection #Cybersecurity #SoftwareSupplyChain #MaliciousPackages

    #maliciouspackages #softwaresupplychain #cybersecurity #npminfection #shaihuludreturns #hackernews
  7. Hacker News @[email protected] ·

    Shai-Hulud Returns: Over 300 NPM Packages Infected

    helixguard.ai/blog/malicious-s

    #HackerNews #ShaiHuludReturns #NPMInfection #Cybersecurity #SoftwareSupplyChain #MaliciousPackages

    #hackernews #shaihuludreturns #npminfection #cybersecurity #softwaresupplychain #maliciouspackages
  8. The DefendOps Diaries @[email protected] ·

    WhatsApp devs, beware: rogue npm packages disguised as legit libraries can unleash a data wipe (rm -rf *) and hide a secret exfiltration function. How safe is your code when even kill switches are in play? Dive deeper.

    thedefendopsdiaries.com/unmask

    #npmsecurity
    #whatsappdevelopers
    #supplychainattack
    #cybersecurity
    #maliciouspackages

    #npmsecurity #whatsappdevelopers #supplychainattack #cybersecurity #maliciouspackages
  9. The DefendOps Diaries @[email protected] ·

    WhatsApp devs, beware: rogue npm packages disguised as legit libraries can unleash a data wipe (rm -rf *) and hide a secret exfiltration function. How safe is your code when even kill switches are in play? Dive deeper.

    thedefendopsdiaries.com/unmask

    #npmsecurity
    #whatsappdevelopers
    #supplychainattack
    #cybersecurity
    #maliciouspackages

    #maliciouspackages #cybersecurity #supplychainattack #whatsappdevelopers #npmsecurity
  10. The DefendOps Diaries @[email protected] ·

    WhatsApp devs, beware: rogue npm packages disguised as legit libraries can unleash a data wipe (rm -rf *) and hide a secret exfiltration function. How safe is your code when even kill switches are in play? Dive deeper.

    thedefendopsdiaries.com/unmask

    #npmsecurity
    #whatsappdevelopers
    #supplychainattack
    #cybersecurity
    #maliciouspackages

    #npmsecurity #whatsappdevelopers #supplychainattack #cybersecurity #maliciouspackages
  11. The DefendOps Diaries @[email protected] ·

    Some npm packages disguised as helpful utilities have been found wiping entire directories. How are these digital saboteurs sneaking into projects, and what can you do to stop them? Find out more.

    thedefendopsdiaries.com/unders

    #npmsecurity
    #maliciouspackages
    #softwaredevelopment
    #cybersecurity
    #supplychainsecurity

    #npmsecurity #maliciouspackages #softwaredevelopment #cybersecurity #supplychainsecurity
  12. The DefendOps Diaries @[email protected] ·

    Some npm packages disguised as helpful utilities have been found wiping entire directories. How are these digital saboteurs sneaking into projects, and what can you do to stop them? Find out more.

    thedefendopsdiaries.com/unders

    #npmsecurity
    #maliciouspackages
    #softwaredevelopment
    #cybersecurity
    #supplychainsecurity

    #supplychainsecurity #cybersecurity #softwaredevelopment #maliciouspackages #npmsecurity
  13. The DefendOps Diaries @[email protected] ·

    Some npm packages disguised as helpful utilities have been found wiping entire directories. How are these digital saboteurs sneaking into projects, and what can you do to stop them? Find out more.

    thedefendopsdiaries.com/unders

    #npmsecurity
    #maliciouspackages
    #softwaredevelopment
    #cybersecurity
    #supplychainsecurity

    #npmsecurity #maliciouspackages #softwaredevelopment #cybersecurity #supplychainsecurity
  14. The DefendOps Diaries @[email protected] ·

    Ever downloaded a package that turned out to be a Trojan? Malicious NPM packages are using typosquatting and stealth tactics to sneak into development environments. How secure is your code?

    thedefendopsdiaries.com/naviga

    #npmsecurity
    #maliciouspackages
    #softwaredevelopment
    #cybersecurity
    #dataprotection

    #npmsecurity #maliciouspackages #softwaredevelopment #cybersecurity #dataprotection
  15. The DefendOps Diaries @[email protected] ·

    Ever downloaded a package that turned out to be a Trojan? Malicious NPM packages are using typosquatting and stealth tactics to sneak into development environments. How secure is your code?

    thedefendopsdiaries.com/naviga

    #npmsecurity
    #maliciouspackages
    #softwaredevelopment
    #cybersecurity
    #dataprotection

    #dataprotection #cybersecurity #softwaredevelopment #maliciouspackages #npmsecurity
  16. The DefendOps Diaries @[email protected] ·

    Ever downloaded a package that turned out to be a Trojan? Malicious NPM packages are using typosquatting and stealth tactics to sneak into development environments. How secure is your code?

    thedefendopsdiaries.com/naviga

    #npmsecurity
    #maliciouspackages
    #softwaredevelopment
    #cybersecurity
    #dataprotection

    #npmsecurity #maliciouspackages #softwaredevelopment #cybersecurity #dataprotection
  17. The DefendOps Diaries @[email protected] ·

    Sophisticated npm Attack Highlights Software Supply Chain Vulnerabilities

    thedefendopsdiaries.com/sophis

    #npmattack
    #softwaresupplychain
    #cybersecurity
    #opensourcesecurity
    #maliciouspackages

    #npmattack #softwaresupplychain #cybersecurity #opensourcesecurity #maliciouspackages
  18. The DefendOps Diaries @[email protected] ·

    Sophisticated npm Attack Highlights Software Supply Chain Vulnerabilities

    thedefendopsdiaries.com/sophis

    #npmattack
    #softwaresupplychain
    #cybersecurity
    #opensourcesecurity
    #maliciouspackages

    #maliciouspackages #opensourcesecurity #cybersecurity #softwaresupplychain #npmattack
  19. Tedi Heriyanto @[email protected] ·

    OpenSSF Malicious Packages: This repository is a collection of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format: github.com/ossf/malicious-pack

    #MaliciousPackages #osv #openssf

    #maliciouspackages #osv #openssf
  20. Tedi Heriyanto @[email protected] ·

    OpenSSF Malicious Packages: This repository is a collection of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format: github.com/ossf/malicious-pack

    #MaliciousPackages #osv #openssf

    #maliciouspackages #osv #openssf
  21. Tedi Heriyanto @[email protected] ·

    OpenSSF Malicious Packages: This repository is a collection of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format: github.com/ossf/malicious-pack

    #MaliciousPackages #osv #openssf

    #maliciouspackages #osv #openssf
  22. Trent Johnson 🦍 @[email protected] ·

    I had #ChatGPT write a #Python script to scan my machines for the infected packages mentioned in this @BleepingComputer article. I've tested it on my work laptop and that is it. Please feel free to test it out and let me know if it works.

    github.com/ludothegreat/Python

    #PythonSecurity #MaliciousPackages #DataProtection #PythonScript #InfoSec #cybersecurity #PythonPackages

    #chatgpt #python #pythonsecurity #maliciouspackages #dataprotection #pythonscript
  23. Trent Johnson 🦍 @[email protected] ·

    I had #ChatGPT write a #Python script to scan my machines for the infected packages mentioned in this @BleepingComputer article. I've tested it on my work laptop and that is it. Please feel free to test it out and let me know if it works.

    github.com/ludothegreat/Python

    #PythonSecurity #MaliciousPackages #DataProtection #PythonScript #InfoSec #cybersecurity #PythonPackages

    #chatgpt #python #pythonsecurity #maliciouspackages #dataprotection #pythonscript
  24. Trent Johnson 🦍 @[email protected] ·

    I had #ChatGPT write a #Python script to scan my machines for the infected packages mentioned in this @BleepingComputer article. I've tested it on my work laptop and that is it. Please feel free to test it out and let me know if it works.

    github.com/ludothegreat/Python

    #PythonSecurity #MaliciousPackages #DataProtection #PythonScript #InfoSec #cybersecurity #PythonPackages

    #chatgpt #python #pythonsecurity #maliciouspackages #dataprotection #pythonscript
  25. Trent Johnson 🦍 @[email protected] ·

    I had #ChatGPT write a #Python script to scan my machines for the infected packages mentioned in this @BleepingComputer article. I've tested it on my work laptop and that is it. Please feel free to test it out and let me know if it works.

    github.com/ludothegreat/Python

    #PythonSecurity #MaliciousPackages #DataProtection #PythonScript #InfoSec #cybersecurity #PythonPackages

    #pythonpackages #cybersecurity #infosec #pythonscript #dataprotection #maliciouspackages
  26. Trent Johnson 🦍 @[email protected] ·

    I had #ChatGPT write a #Python script to scan my machines for the infected packages mentioned in this @BleepingComputer article. I've tested it on my work laptop and that is it. Please feel free to test it out and let me know if it works.

    github.com/ludothegreat/Python

    #PythonSecurity #MaliciousPackages #DataProtection #PythonScript #InfoSec #cybersecurity #PythonPackages

    #chatgpt #python #pythonsecurity #maliciouspackages #dataprotection #pythonscript