cm0002@europe.pub to Linux@programming.dev · 4 days agoThe security situation with the Arch Linux AUR got a lot worsewww.gamingonlinux.comexternal-linkmessage-square40linkfedilinkarrow-up1181arrow-down15cross-posted to: [email protected]
arrow-up1176arrow-down1external-linkThe security situation with the Arch Linux AUR got a lot worsewww.gamingonlinux.comcm0002@europe.pub to Linux@programming.dev · 4 days agomessage-square40linkfedilinkcross-posted to: [email protected]
minus-squarebrucethemoose@lemmy.worldlinkfedilinkarrow-up15·4 days agoIt seems like some person with a bot just asked to maintain a bunch of orphaned packages, abusing the 2-week waiting period. Right? Thats why they used npm; off the shelf, almost “standard practice” credential harvesting malware. Nothing too fancy.
It seems like some person with a bot just asked to maintain a bunch of orphaned packages, abusing the 2-week waiting period. Right?
Thats why they used npm; off the shelf, almost “standard practice” credential harvesting malware. Nothing too fancy.