Show Navigation

Public
- Public
- Network
- Groups
- Popular
- People

Conversation

Notices

lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Saturday, 20-May-2023 12:43:01 EDT lnxw48a1

https://nu.federati.net/url/290474 [www bleepingcomputer com]

#Malware found on #NodeJS #NPM registry
In conversation Saturday, 20-May-2023 12:43:01 EDT from nu.federati.net permalink
Attachments
1. npm packages hide TurkoRAT malware in what looks like a NodeJS EXE
  
  from BleepingComputer
  
  Researchers have discovered multiple npm packages named after NodeJS libraries that even pack a Windows executable that resembles NodeJS but instead drops a sinister trojan.
1. GeniusMusing (geniusmusing@nu.federati.net)'s status on Saturday, 20-May-2023 13:43:37 EDT GeniusMusing
  in reply to
  
  Related:
  Python Infrastructure Status PyPI new user and new project registrations temporarily suspended.
  https://status.python.org/incidents/qy2t9mjjcc7g
  
  >New user and new project name registration on PyPI is temporarily suspended. The volume of malicious users and malicious projects being created on the index in the past week has outpaced our ability to respond to it in a timely fashion, especially with multiple PyPI administrators on leave.
  >
  >While we re-group over the weekend, new user and new project registration is temporarily suspended.
  >Posted 2 hours ago. May 20, 2023 - 16:02 UTC
  In conversation Saturday, 20-May-2023 13:43:37 EDT from nu.federati.net permalink
  Attachments
  1. PyPI new user and new project registrations temporarily suspended.

Jonkman Microblog is a social network, courtesy of SOBAC Microcomputer Services. It runs on GNU social, version 1.2.0-beta5, available under the GNU Affero General Public License.

All Jonkman Microblog content and data are available under the Creative Commons Attribution 3.0 license.

Switch to desktop site layout.