Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.social/users/jbzfn/statuses/111380771688694234">jbz (jbzfn@mastodon.social)'s status on Thursday, 09-Nov-2023 22:32:38 JST</a><a href="https://mastodon.social/@jbzfn" title="jbzfn@mastodon.social"><img src="https://gnusocial.jp/avatar/82970-48-20240606191406.webp" width="48" height="48" alt="jbz" style="position: absolute; left: 0; top: 0;">jbz</a></section><article><p>🚪 Highly invasive backdoor snuck into open source packages targets developer<br>➥ Ars Technica<br> <a href="https://arstechnica.com/security/2023/11/developers-targeted-with-malware-that-monitors-their-every-move/" rel="nofollow noreferrer">https://arstechnica.com/security/2023/11/developers-targeted-with-malware-that-monitors-their-every-move/</a></p><p><a href="https://mastodon.social/tags/Malware" rel="tag">#Malware</a> <a href="https://mastodon.social/tags/Opensource" rel="tag">#Opensource</a> <a href="https://mastodon.social/tags/Cybersecurity" rel="tag">#Cybersecurity</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2302400#notice-4542346">In conversation</a><time datetime="2023-11-09T22:32:38+09:00" title="Thursday, 09-Nov-2023 22:32:38 JST">about a year ago</time> <span>from <span><a href="https://mastodon.social/@jbzfn/111380771688694234" rel="external" title="Sent from mastodon.social via ActivityPub">mastodon.social</a></span></span><a href="https://mastodon.social/@jbzfn/111380771688694234">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: cdn.arstechnica.net</div><h5><a href="https://arstechnica.com/security/2023/11/developers-targeted-with-malware-that-monitors-their-every-move/#Malware">Highly invasive backdoor snuck into open source packages targets developers</a></h5><div></div></header><div>Packages downloaded thousands of times targeted people working on sensitive projects.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
jbz (jbzfn@mastodon.social)'s status on Thursday, 09-Nov-2023 22:32:38 JST jbz
🚪 Highly invasive backdoor snuck into open source packages targets developer
➥ Ars Technica
https://arstechnica.com/security/2023/11/developers-targeted-with-malware-that-monitors-their-every-move/
#Malware #Opensource #Cybersecurity
In conversationabout a year ago from mastodon.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: cdn.arstechnica.net
  Highly invasive backdoor snuck into open source packages targets developers
  Packages downloaded thousands of times targeted people working on sensitive projects.

Public

Embed Notice

HTML Code

Corresponding Notice