It's a day ending in "y".... so there's a supply chain attack happening on npm
Uncategorized
2
Posts
1
Posters
4
Views
-
It's a day ending in "y".... so there's a supply chain attack happening on npm
TanStack npm Packages Compromised in Ongoing Mini Shai-Hulud...
Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.
Socket (socket.dev)
-
It's a day ending in "y".... so there's a supply chain attack happening on npm
TanStack npm Packages Compromised in Ongoing Mini Shai-Hulud...
Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.
Socket (socket.dev)
This thing has spread to UiPath packages.... that's a major business automation company and this thing just went nuclear just because all the sensitive places where UiPath is used
-
M mttaggart@infosec.exchange shared this topic