Tag: malicious packages

Malicious Ruby Gems and Go Modules Target CI Pipelines for Credential Theft

Attackers are exploiting automated CI build processes by embedding credential-harvesting code into fake updates of widely-used open source packages.