Tag: open source
Two Perth men face court over TeamPCP open-source poisoning
Australian police charged two Western Australian men over the TeamPCP syndicate's open-source supply chain attacks.
Rust project yanks three poisoned crates after build-time backdoor
The Rust project yanked three poisoned crates after a compromised account shipped a build-time backdoor.
Sandbox escape in isolated-vm gives guests host memory control
Endor Labs shows a type confusion in isolated-vm lets sandboxed code take over the host process.
MLflow and FUXA flaws draw scans aimed at cloud secrets
Scanners are hammering MLflow and FUXA servers as attackers chase cloud credentials and code execution.
Fresh GPG key now signs Firefox and Thunderbird Linux builds
Fresh GPG key now signs Firefox and Thunderbird Linux builds.
Self-propagating npm worm poisons 400-plus packages via stolen tokens
The Mini Shai-Hulud worm stole publisher credentials, republished tainted packages, and burrowed into AI coding tools.
FakeGit campaign floods GitHub with 7,600 malicious repositories
A large-scale supply chain attack dubbed FakeGit uses thousands of deceptive GitHub repositories to distribute SmartLoader malware.
Notepad++ vulnerabilities enable PowerShell command injection attacks
Multiple Notepad++ vulnerabilities including PowerShell command injection and Zip Slip disclosed before patch