News for hackers. Stuff that matters.

A comment on Remote code execution in Homebrew by compromising the official Cask repository. Parent comment

Re:Remote code execution in Homebrew by compromising the off... by zbentley on Saturday April 24, 2021 @01:54PM (#26926879)
Not brew, but a very similar set of issues were faced by the GitHub team with the CocoaPods project, which at the time worked similar to Homebrew in that they used github as a CDN/host in a somewhat uncommon way:

https://blog.cocoapods.org/Master-Spec-Repo-Rate-Limiting-Po...

https://github.com/CocoaPods/CocoaPods/issues/4989#issuecomm...

[ Parent | on HN ]

There are no comments on this comment yet.