New Shai-Hulud malware wave compromises 600 npm packages
… It primarily targets developer workstations and CI/CD environments, including GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI, Vercel, Netlify, and other build platforms. …
Search
Related topics:
GitHub
Tracked topic
GitHub
GitHub is a web-based platform for hosting and collaborating on software using Git version control, offering features such as pull requests.
New IronWorm malware hits 36 packages in npm supply-chain attack
… This behavior is conceptually similar to Shai Hulud , which had its code published on GitHub recently. …
77 Open VSX extensions found harvesting developer info
… They enumerated up to 60 installed extensions and collected identifiers from CI and cloud development environments, including GitHub, GitLab, Azure DevOps, Buildkite, CircleCI, GitHub Codespaces, and Gitpod. What is unusual about this campaign is that the Open VSX listings disclosed that they coll… …