This exact type of database-stored executable javascript was one of the most annoying types of infections to clean up.
Also, does this worm have a name?
Basically someone who had permissions to alter site js, accidentally added malicious js. The main solution is to be very careful about giving user accounts permission to edit js.
[There are of course other hardening things that maybe should be done based on lessons learned]
The account in question had "staff" rights which gave him basically all rights on all wikis.
It used to be all "admin" accounts, of which there were many more. Restricting it to "interface admin" only is a fairly recent change.
Its been 8 years!
It's a common feature of CMS'es and "tag management systems." Its presence is a massive PITA to developers even _besides_ the security, but PMs _love them_, in my experience.
I still have a basic assumption that if something I'm reading doesn't make much sense to me, I probably just don't understand it. Over the last few years I've had to get used to the new assumption that it's because I'm reading LLM output.
I've been spending less and less time here, the moderation is obviously overwhelmed and is losing the battle.
https://aphyr.com/posts/389-the-future-of-forums-is-lies-i-g...
I wouldn't be surprised if that group were the origin of this attack too.
Most claims of LLM authorship are erroneous.
It only clicked for me a few weeks ago, in one thread or another here when I realized that no one could ever do what Google did once: Cloudflare and other antibot technologies have closed off traditional search-as-the-result-of-web-crawling permanently. It's not that no one will do it because they think there's no money in it, or that no one will do it because the upfront costs are gigantic... literally it can no longer be done.
The internet died.
Mojeek is a good independent search browser, it isn't the best but at that Hackernews comment/analysis I was doing I found it to be the only one which worked for that case.
Brave exists too.
I know the situation is very critical/dire tho but there is still some chance. All be it quite small.
Mojeek IIRC, is operated by one single guy for 15 years.
My LLM sense is tingling.