NewsArs Technica — Security
Dozens of Red Hat packages backdoored through its official NPM channel
Teaser from the source
Anyone who has downloaded affected Red Hat packages should investigate immediately.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Ars Technica — SecurityMore on backdoored
Other advisories
- Criticalpwn_watch:ovhcloud-cli-github-infostealerOVHcloud CLI releases backdoored on GitHub
- Highpwn_watch:updraftcentral-keys-wordpress-backdoorTeamUpdraft / UpdraftCentral keys stolen; WordPress sites backdoored
- Criticalpwn_watch:rank-math-pro-wordpress-backdoorRank Math PRO WordPress plugin download backdoored
- Criticalpwn_watch:aomei-backupper-update-supply-chainAOMEI Backupper update servers backdoored (Mandiant)
- Highpwn_watch:ultralytics-pypi-supply-chain-attackUltralytics PyPI releases backdoored with a crypto miner
- HighCVE-2024-54134@solana/web3.js npm package backdoored to steal private keys
Other news entries
- Anthropic VS code extension on Cursor backdoored for nearly 12 hoursNewsArs Technica — Security
- OVHcloud CLI releases backdoored on GitHub to steal developer secretsNewsBleepingComputer
- Modified ScreenConnect Clients Used in Worm-Like CampaignNewsSecurityWeek
- Backdoored Rust packages hit crates.io, exposing developers to malware at build timeNewsCSO Online
- Thousands of servers can be backdoored by exploiting buggy motherboard controllersNewsArs Technica — Security
- ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain AttackNewsThe Hacker News
- China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a DecadeNewsThe Hacker News
- Widely used Daemon Tools disk app backdoored in monthlong supply-chain attackNewsArs Technica — Security
ID