BattleRemote3157

well! its only 50% or only a subset of what we analyze i share which are really important. There are more than that we detect and analyze small small malicious packages

ok yes it is Remote Access Trojan.

yes obvious

its better to install safely atleast [https://github.com/safedep/pmg](https://github.com/safedep/pmg)

we don't get a break too, our usual mornings just go in analyzing and updating the community🥱

yeah.

update: TanStack Router got hit via GitHub Actions cache poisoning. attacker opened a PR, poisoned the shared pnpm cache through `pull_request_target`, force-pushed the branch clean and waited. and hours later the release pipeline restored that cache and the payload ran, GitHub OAuth token stolen, malicious packages published to npm

you should have some more safer guardrail. you can use pmg [https://github.com/safedep/pmg](https://github.com/safedep/pmg) and top of it add dependency cooldown

more by the way [https://www.npmjs.com/\~tikeqemif26](https://www.npmjs.com/~tikeqemif26) , [https://www.npmjs.com/\~umar\_bektembiev1](https://www.npmjs.com/~umar_bektembiev1)

its have been now removed from npm registry. Do ensure you not have installed earlier though. checkout [https://github.com/safedep/pmg](https://github.com/safedep/pmg)

exactly, they got lucky and have plenty of credentials

TeamPCP is having a field day. Trivy. litellm. Now telnyx.