North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft.
According to JFrog, the packages “rollup-packages-polyfill-core” and “rollup-runtime-polyfill-core” mimic the legitimate “rollup-plugin-polyfill-node” project, down to the description, repository metadata, and
Source: The Hacker News
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You The private email address GitLab gives you for filing issues by email is a
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 β 728 requests (recent log) 216.73.217.60 β 402 requests (recent log) 45.148.10.21 β 348 requests (recent
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 β 734 requests (recent log) 34.65.117.95 β 506 requests (recent log) 216.73.216.86 β 166 requests (recent