News for hackers. Stuff that matters.

bad_oss

Attacker Uses a Popular TikTok Challenge to Lure Users Into Installing Malicious Package
Re:RepoJacking Vulnerability in GitHub on Thursday October 27, 2022 @04:49AM (#33354937)
A logical flow in GitHub allows attackers to take control over GitHub repositories belonging to renamed accounts
This typosquatting attack is targeting Python’s top packages such as idna, flask, docutils and more with over 500 million monthly downloads combined.