| GitHub | https://github.com/voxpelli |
| Bluesky | https://bsky.app/profile/voxpelli.com |
| Blog | https://voxpelli.com |
| Profile | https://kodfabrik.se |
#NPM #axios maintainer has lost control of their account. Malicious versions 1.14.1 and 0.30.4 have been published which include a RAT.
NPM has pulled the effected versions and the payload. Time to clean up and see if you were effected.
StepSecurity has an awesome write up on this issue with #iocs
Link follows this toot.
#CTI #infosec #node #cybersecurity #security #nodejs #js #malware
Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigating and will update this post with a full technical analysis.
Ivory v2.5 is now available in the App Store!
What's new:
- Audio Playback (including support for posting audio files)
- Configure 4 Swipe Gestures for Posts
- Support for Viewing Rich Text Posts
- Various bug fixes.
Download the update here:
https://apps.apple.com/us/app/ivory-for-mastodon-by-tapbots/id6444602274
RE: https://mastodon.social/@stroughtonsmith/116255419547147086
This is why I find https://setapp.com/ to be a great thing – on MacOS and iOS alike.
It lowers the threshold to get started with a subscription.
@stroughtonsmith Any thoughts on adding Pastel to Setapp?
Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collectively downloaded more than 128 million times could be exploited to steal local files and execute code remotely.
Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collectively downloaded more than 128 million times could be exploited to steal local files and execute code remotely.
Insane at the USA is now going to be punishing us because they want a piece of land that’s not theirs.
Not ok.
https://apnews.com/article/denmark-greenland-us-trump-4ad99ea3975a8b62d37bd04961feda55
President Donald Trump says he'll impose a 10% import tax starting in February on goods from eight European nations because of their opposition to American control of Greenland. His threat sets up a potentially dangerous test of U.S. partnerships in Europe. Denmark, Norway, Sweden, France, Germany, the United Kingdom, the Netherlands and Finland would face the tariff. Trump says the rate would climb to 25% on June 1 if no deal was in place for “the Complete and Total purchase of Greenland” by the United States. European leaders said the tariffs “would undermine transatlantic relations and risk a dangerous downward spiral.”
IAintShootinMis
blazr
Ivory by Tapbots 
BleepingComputer
Claes de Vreese
Patricia Aas 🐢🏳️🌈