Worm armed 42 GitHub repos by hiding a payload too big to fail
MentionsGitHub
A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking accounts as early as July and using a stealthy payload built to stay hidden from GitHub and automated scanners, according to JFrog researchers.
Summary from The Register Security.
Explained
The technology and terms in this story. Learn more
