← Toutes les actualitésLire l'article ↗
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
8 octobre 20261 min
sonatype.compar https://www.sonatype.com/blog/author/sonatype-security-research-team
Synthèse
A hijacked TensorLake npm release used a preinstall hook to steal credentials, run remote commands, and potentially expose data through GitHub.
A hijacked TensorLake npm release used a preinstall hook to steal credentials, run remote commands, and potentially expose data through GitHub.
Source originale
sonatype.com