"Evan Boehs"の検索結果1 - 2 件 / 2件

• あとで読む

  research!rsc: Timeline of the xz open source attack

  • 33 users
  • research.swtch.com
  • テクノロジー
  • 2024/04/02

  Posted on Monday, April 1, 2024. Updated Wednesday, April 3, 2024. Over a period of over two years, an attacker using the name “Jia Tan” worked as a diligent, effective contributor to the xz compression library, eventually being granted commit access and maintainership. Using that access, they installed a very subtle, carefully hidden backdoor into liblzma, a part of xz that also happens to be a d

  • セキュリティ
  • security
  • techfeed
  • Software
  • web
• あとで読む

  NPM registry prank leaves developers unable to unpublish packages

  • 6 users
  • www.scmagazine.com
  • テクノロジー
  • 2024/01/06

  NPM registry prank leaves developers unable to unpublish packagesLaura FrenchJanuary 3, 2024 A prank on npm included a meme image of Gary Oldman from the film “Léon." (Photo by Patrick Camboulive / Sygma via Getty Images) Update Jan. 4, 2024: GitHub told SC Media Wednesday night that disruptions related to the "everything" package, and its registry-wide dependencies, were being resolved. "We found

  • npm
  • article