GitHub Actions Compromised Again: Mini Shai-Hulud Supply-Chain Attack Continues
Two compromised GitHub Actions were re-enabled, pointing to malicious code for over a week, despite efforts to remove them.
Search
Find a quick tip
Results for "Shai".
New Shai-Hulud attack trojanizes 19 science-focused PyPI packages
Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud supply-chain attack that delivered malware designed to steal developer secrets.
The EU Wants to Break Up Kids and Their Chatbots
ChatGPT, Character.ai, and Snapchat’s My AI will all be in the crosshairs as the EU Kids Act aims to strip minor-facing chatbots of all the things that make people love.
GitHub e PyPI Implementam Mecanismos Baseados no Tempo para Proteger contra Ataques de Supply Chain
GitHub e PyPI introduziram um mecanismo baseado no tempo na ferramenta Dependabot para proteger contra ataques de supply chain e limitar seu impacto.
Understanding the Miasma Worm: Source Code Leak and Its Implications
The Miasma worm source code was briefly leaked on GitHub, indicating a sophisticated supply-chain attack. This article delves into the details of the malware and its potential impact on the open-source ecosystem.
Red Hat npm packages compromised to steal developer credentials
More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, dubbed "Miasma.".