GitHub was hacked, many platforms were severely affected, including crypto projects.
A large-scale malware attack on GitHub with 35,000 “code hits” has been ongoing at the same time that thousands of Solana wallets were accessed by hackers yesterday morning.
GitHub developer Stephen Lucy noticed security flaw
I am uncovering what seems to be a massive widespread malware attack on
@githubCurrently over 35k repositories are infected
So far found in projects including: crypto, golang, python, js, bash, docker, k8s
It is added to npm scripts, docker images and install docs
The attack has so far impacted a wide range of platforms, including cryptocurrency initiatives. The flaw affects doc settings, npm scripts, and docker images, which are useful for pre-packaging common shell commands for projects.
An attacker first generates a false archive (one that has all of the project’s contents and each file’s revision history) before pushing copies of real projects to GitHub in order to deceive developers and obtain access to crucial data.
These cloned repositories are frequently distributed via “pull requests”. This stipulation enables developers to alert others of updates they have submitted to a branch in a GitHub project.
The whole environment variable (ENV) of the script, application, or laptop (electronic application) is communicated to the server after a developer falls victim to a virus assault. of the assailant. AWS access key, crypto key, security key, and ENV are all included.
Developers should GPG-sign repository modifications, the developer suggested in a GitHub issue report. By providing a means to confirm all updates originate from a reputable source, GPG Keys add an additional degree of security to GitHub accounts and software projects.
DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.
Join CoinCu Telegram to keep track of news: https://t.me/coincunews
Follow CoinCu Youtube Channel | Follow CoinCu Facebook page
Annie
CoinCu News
Author
News
Hack On GitHub Also Affects Some Crypto Projects
GitHub was hacked, many platforms were severely affected, including crypto projects.
A large-scale malware attack on GitHub with 35,000 “code hits” has been ongoing at the same time that thousands of Solana wallets were accessed by hackers yesterday morning.
GitHub developer Stephen Lucy noticed security flaw
I am uncovering what seems to be a massive widespread malware attack on
@githubCurrently over 35k repositories are infected
So far found in projects including: crypto, golang, python, js, bash, docker, k8s
It is added to npm scripts, docker images and install docs
The attack has so far impacted a wide range of platforms, including cryptocurrency initiatives. The flaw affects doc settings, npm scripts, and docker images, which are useful for pre-packaging common shell commands for projects.
An attacker first generates a false archive (one that has all of the project’s contents and each file’s revision history) before pushing copies of real projects to GitHub in order to deceive developers and obtain access to crucial data.
These cloned repositories are frequently distributed via “pull requests”. This stipulation enables developers to alert others of updates they have submitted to a branch in a GitHub project.
The whole environment variable (ENV) of the script, application, or laptop (electronic application) is communicated to the server after a developer falls victim to a virus assault. of the assailant. AWS access key, crypto key, security key, and ENV are all included.
Developers should GPG-sign repository modifications, the developer suggested in a GitHub issue report. By providing a means to confirm all updates originate from a reputable source, GPG Keys add an additional degree of security to GitHub accounts and software projects.
DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.
Join CoinCu Telegram to keep track of news: https://t.me/coincunews
Follow CoinCu Youtube Channel | Follow CoinCu Facebook page
Annie
CoinCu News
Other Posts
Related Posts
Latest
Best Cryptos to Buy in December 2024: Qubetics Presale Goes Ballistic as Ethereum and Quant Look to Build Momentum
USDC and CCTP to launch on Aptos, with Stripe adding Aptos support in crypto products
Best Cryptos to Buy: Qubetics Set to Rise, Bitcoin Knocks at $100k Milestone, Avalanche to Release 1.67M Tokens
Press Release
Best Cryptos to Buy in December 2024: Qubetics Presale Goes Ballistic as Ethereum and Quant Look to Build Momentum
USDC and CCTP to launch on Aptos, with Stripe adding Aptos support in crypto products
