Marre des logs NPM tout gris ? Je vous ai préparé une nouvelle variante de colorisation pour votre terminal !
Un coup de Bash et hop, tout devient plus clair à repérer :
🔵 IP client
🟢 Pays OK
🔴 Pays bloqué
🟡 Domaine
🟣 Code HTTP
Le code est ici 👇
👉 https://privatebin.blablalinux.be/?41ae048c9c122ae7#CSodkfFCWSUEgwiSe2Ekt5GcmEhy2zQxXeAfn2kntdui
#IronWorm : Un #virus qui se propage de #PC en #PC , et stocké dans #npm : une #cyberattaque #mondiale #massive a été évitée de justesse...
https://www.01net.com/actualites/virus-qui-propage-pc-cyberattaque-massive-evitee-justesse.html
Uh, but also, I'm not actually confident that Microsoft *won't* get supply-chained themselves. Their products use all of the same libraries I'm right now telling #npm not to install. Their CI vulnerabilities are enabling the supply-chain attacks I'm trying to avoid.
Argh.
Maybe I should try using a #Sass implementation written in #Rust or something instead, and ditch npm entirely. At least for this project.
I see that modern #npm has a `before` option that prohibits installing package versions released after a certain date.
Excellent. I'll just go ahead and set that to forever ago, before “all your supply chain are belong to us” happened.
Now I just have to hope and pray that Node.js, npm, and the npm registry (i.e. Microsoft) don't get supply-chained themselves…
📣🚨 32 Red Hat npm packages were compromised by Miasma malware after attackers abused a hacked GitHub account to push malicious updates, exposing cloud and CI/CD secrets.
Read: https://hackread.com/miasma-malware-red-hat-packages-github-account/
Malware Worms Infect npm Ecosystem in Dual Supply Chain Attacks
Meet IronWorm, a sneaky Rust-based malware that's infecting the npm ecosystem by scraping sensitive secrets from developers' machines and spreading through poisoned packages. This stealthy threat hides behind an eBPF kernel rootkit and communicates with its operators over Tor.
New #IronWorm #Malware Hits 36 Packages In #npm Supply-Chain Attack
#supplychain #security
A new npm supply-chain attack has infected 36 packages with Rust-based infostealer malware called IronWorm. According to BleepingComputer, the malware "targets 86 environment variables (key-value pairs) and 20 credential files that may contain OpenAI, AWS, Anthropic, and npm credentials, vault confi...
With the rise of AI coding assistants continuing apparently unabated, some project maintainers have begun striking back. Ars Technica reports on projects putting hostile directions into the AGENTS.…
BlablaLinux
Rod2ik 🇪🇺 🇨🇵 🇪🇸 🇨🇱 🇺🇦 🇨🇦 🇬🇱 ☮🕊️
Rod2ik 🇪🇺 🇨🇵 🇪🇸 🇨🇱 🇺🇦 🇨🇦 🇬🇱☮🕊️
ARGVMI~1.PIF
Hackread.com
Frankie ✅
Analyst207
PrivacyDigest
13