Europe Pub
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
☆ Yσɠƚԋσʂ ☆@lemmy.ml to Security@lemmy.mlEnglish · 2 天前

Fake Express Packages on npm Spread a Linux Worm

safedep.io

external-link
message-square
2
link
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
12
external-link

Fake Express Packages on npm Spread a Linux Worm

safedep.io

☆ Yσɠƚԋσʂ ☆@lemmy.ml to Security@lemmy.mlEnglish · 2 天前
message-square
2
link
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
DirtyBlanket: Fake Express Packages on npm Spread a Linux Worm
safedep.io
external-link
Nine fake Express and React packages on npm run a Linux worm at install time. It installs a Tor backdoor and spreads through SSH, AUR packages, and npm tokens.
alert-triangle
You must log in or # to comment.
  • ghost_laptop@lemmy.mlM
    link
    fedilink
    arrow-up
    3
    ·
    2 天前

    6th npm vulnerability this year…

    • eldavi@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 天前

      i was wondering how many it was so far and it feel sorry for all the front end guys have to deal with this shit.

Security@lemmy.ml

security@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !security@lemmy.ml

Confidentiality Integrity Availability

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 21 users / week
  • 30 users / month
  • 511 users / 6 months
  • 8 local subscribers
  • 7.04K subscribers
  • 280 Posts
  • 249 Comments
  • Modlog
  • mods:
  • ghost_laptop@lemmy.ml
  • BE: 0.19.18
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org