La Fundació General de la Universitat de València ha presentat el seu informe anual de 2025, un exercici marcat pels efectes persistents de la dana del 29 d’octubre de 2024 i per la consolidació de la seua activitat...
https://blog.gslin.org/archives/2026/04/01/12962/axios-%e8%a2%ab%e6%a4%8d-malware/
axios 被植 malware
#attack #axios #bun #chain #code #ecosystem #javascript #js #malicious #malware #npm #pnpm #python #security #supply #uv
昨天的大新聞，這次的 supply chain attack 爆在 axios 上：「axios Compromised on npm - Malicious Versions Drop Remote Access Trojan (via)」，除非你的專案有刻意避開，儘量使用原生的 Fetch API 處理，不然幾乎都會用到，如果剛好在這段時間 npm update 的話就會中... 透過 dependency + postinstall 執行 malicious code： The malicious versions inject a new dependency, [email protected].
#Science question. I got Husband a #UV flashlight for his birthday, & we were playing with it last night. One of our discoveries was little random dots of bright orange on our hands.
The web says these could be #fungus or it could be bacterial waste, but the info is pretty scarce. Might any of you #biology peeps have more info? Thanks! #bacteria #skin #microbiome
Dendrobatus Azureus
CDE Universitat de València
MOE ZINE
Life Japan
Gea-Suan Lin
Casa De Ratton
Peter Bittner
Diari La Veu (Unofficial RSS)
MFennVT