Back to article
Socket

Malicious Postinstall Hook Found Across 700+ GitHub Repositories, Including Packagist and Node.js Projects (opens in new tab)

Covered by 4 sources See all sources covering this story including This Week In 4n6, tldr.techDiscussed on Hacker News

Covered in 4 articles

This Week In 4n6·

Week 21

Feeds
tldr.tech·

LiteSpeed cPanel 0-Day ⚙️, Apple M5 MIE Defeated 🍎, npm Staged Publishing ⛓️

Feeds
thehackernews.com·

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

Feeds
CTO at NCSC·

CTO at NCSC Summary: week ending May 31st

Discussed on Substack
Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help