Tag: remote code execution
‘PackageGate’ Vulnerabilities Can Let Attackers Bypass Shai-Hulud Defenses
Jeff Burt | | Aikido Security, Bun, Git dependency, github, Koi Security, microsoft, npm registry, PhantomRaven, PNPM, remote code execution, Shai-Hulud worm, supply chain attack, VLTIn the wake of the massive Shai-Hulud supply chain attack that ripped through npm late last year and compromised more than 700 packages and exposed 25,000 repositories, developers in the JavaScript world ...
N. Korea Contagious Interview Campaign Turns to VS Code to Deliver Backdoor
Jeff Burt | | backdoors, Contagious Interview, Git repositories, github, information stealing, Jamf, North Korea, remote code executionJamf security researchers said state-sponsored espionage actors are using malicious VS Code projects to steal information ...
