🦊 Angular Fox 🚀 — русскогорящие новости сообщества Если обновляли пакеты сегодня — проверьтесь https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised

www.stepsecurity.io Shai-Hulud: Self-Replicating Worm Compromises 500+ NPM Packages - StepSecurity The Shai-Hulud worm has infected over 500 NPM packages including @ctrl/tinycolor in an unprecedented self-propagating supply chain attack. The malware harvests AWS/GCP/Azure credentials using TruffleHog, establishes persistence through GitHub Actions backdoors…

• 🤬 15
• 🔥 3
• 🤯 3
• 👍 2
• 🤣 2
• 👏 1