News for hackers. Stuff that matters.

A comment on Over 100k Infected Repos Found on GitHub. Parent comment

Re:Over 100k Infected Repos Found on GitHub by mgii on Thursday February 29, 2024 @06:37AM (#39548117)
There seems to be a lot of confusion between malware and vulnerabilities. None of the vendors mentioned in this subthread detects malicious code, only vulnerabilities.

Good as they'll be in detecting vulnerabilities, you are still unprotected from malicious code planted in your code bases.

[ Parent | on HN ]
Re:Over 100k Infected Repos Found on GitHub by richbell on Thursday February 29, 2024 @09:36AM (#39549816)
> None of the vendors mentioned in this subthread detects malicious code, only vulnerabilities

Sonatype does if you pay $$$ for Firewall, but that only catches things installed via a package manager.

[ Parent | on HN ]