Tag: open source security
Jscrambler npm package compromised in Rust infostealer attack
Malicious jscrambler npm version 8.14.0 dropped a Rust infostealer that stole credentials and crypto wallet data during installation.
Malicious Ruby Gems and Go Modules Target CI Pipelines for Credential Theft
Attackers are exploiting automated CI build processes by embedding credential-harvesting code into fake updates of widely-used open source packages.