Zerush@lemmy.ml to

Open Source@lemmy.ml · 2 years ago

Over 100,000 Infected Repos Found on GitHub

cross-posted to:
hackernews@lemmy.smeargle.fans

207

Over 100,000 Infected Repos Found on GitHub

Zerush@lemmy.ml to

Open Source@lemmy.ml · 2 years ago

cross-posted to:
hackernews@lemmy.smeargle.fans

The Apiiro research team has detected a repo confusion campaign that has evolved and expanded, impacting over 100k GitHub repos with malicious code.

Chat

Pantherina@feddit.de
link
fedilink
arrow-up
2·
2 years ago
They have no update feature afaik, how does this work? What verified this signature, the user?
- delirious_owl@discuss.online
  link
  fedilink
  arrow-up
  2·
  2 years ago
  Its a subcommand of the AppImage. The developer adds the signature to the AppImage and the user verifies it after download with the subcommand.
  - Pantherina@feddit.de
    link
    fedilink
    arrow-up
    1·
    2 years ago
    Thats nice, didnt even know there was an interface for managing appimages?

Open Source@lemmy.ml

opensource@lemmy.ml

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !opensource@lemmy.ml

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Posts must be relevant to the open source ideology
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

388 users / day
2.17K users / week
4.42K users / month
9.62K users / 6 months
403 local subscribers
41.6K subscribers
2.55K Posts
41K Comments
Modlog