Worm armed 42 GitHub repos by hiding a payload too big to fail

A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking accounts as early as July and using a stealthy payload built to stay hidden from GitHub and automated scanners, according to JFrog researchers. Threat hunters at SafeDep, an open source supply... Weiterlesen: Worm armed 42 GitHub repos by hiding a payload too big to fail