Hacker News Reader

danieldspxon Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

Just notice guys it did not started with tinycolor. I had first reported it here, I am just not as popular haha

My posts way before the issue was created: https://news.ycombinator.com/item?id=45252940 https://www.linkedin.com/posts/daniel-pereira-b17a27160_i-ne...

danieldspxon GitHub Attack – branches sending secrets to webhook

Redacted names are shai-hulud, everybody knows by now haha

danieldspxon Active NPM supply chain attack: Tinycolor and 40 Packages Compromised

I if you think that last week attack was s1ngularity that can be related to wormhole, now we get this shai-hulud that is actually a worm. Funny right? They are similar attacks also. This funny coincidence was described by someone at Aikido Security.

danieldspxon GitHub Attack – branches sending secrets to webhook

I redacted the names to avoid spreading and teaching people how to get other people's secrets. I am in contact with Github and will update here once they solve the issue.