[姆咪] 25 个透过 NPM 散布的恶意函式库

楼主: nh60211as   2022-02-26 20:36:42
https://thehackernews.com/2022/02/25-malicious-javascript-libraries.html
几乎都是偷 Discord token 跟环境变量的
还有 package 会 RCE Python 程式码
作者: Firstshadow (IamCatづミ'_'ミづ)   2022-02-26 20:46:00
笑了== discord-protection->Discord token stealer

Links booklink

Contact Us: admin [ a t ] ucptt.com