Miscreants aim to cause Discord discord with malicious npm packages
The malware is hidden in four malicious npm modules: small-sm, pern-valids, lifeculer, and proc-title. These were dressed up to appear to be useful, innocent libraries that developers then pull into their applications and execute.
Software supply chains have long been targets of attackers, particularly those targeting frameworks like shopping carts or development tooling, according to Tim Mackey, principal security strategist at Synopsis' Cybersecurity Research Center. The detection of LofyLife comes as GitHub makes a few changes to npm. That includes a streamlined login and publish experience in the npm CLI and the ability to connect GitHub and Twitter accounts to npm. In addition, all npm packages were re-signed, and GitHub added a new npm CLI command for auditing the integrity of the package.
日本 最新ニュース, 日本 見出し
Similar News:他のニュース ソースから収集した、これに似たニュース記事を読むこともできます。
Woman sexually assaulted in Paisley town centre on Sunday morningThe 41-year-old victim was left shaken as a result and is currently being provided support by specialist officers.
続きを読む »
Warning after bonfire embers spark countryside blazeFirefighters have urged people not to have open fires at the moment due to the dry conditions.
続きを読む »
All Of Emma Watson’s Most Surprising Red-Carpet MomentsThe looks that caused the biggest stir.
続きを読む »
Google: London cloud outage limited impact of incidentCan't say what caused cooling failure, admits to re-routing traffic away from working resources
続きを読む »
Biker injured in crash on B1190 Doddigton road in LincolnThis has caused traffic delays this morning Lincoln
続きを読む »