/
initial_access_vector:compromised_account × criticity:high × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

safedep.io · high

Deep-Live-Cam GitHub repo compromised: malicious dependency loads cryptocurrency clipboard hijacker on Windows and macOS

On September 8, 2026, an attacker added a malicious source dependency to Deep-Live-Cam, a Python face-swapping app with about 96,600 GitHub stars. Commit 7895c547 ("chore: update requirements.txt") rewrote 18 dependency entries and added requests @ git+https://github.com/pypls/requests.git. This points installation to a lookalike reposito…

technology cryptocurrency
darkreading.com · · 5 fontes · 5 atualizações high

OVHcloud CLI v0.11.0–v0.15.0 release assets swapped with secret-stealing binary via hijacked GitHub contributor account

On 19 October 2026 an attacker used a hijacked GitHub account of an OVHcloud contributor to overwrite the download archives of five existing OVHcloud CLI releases (v0.11.0 to v0.15.0) with a build designed to steal secrets from the disk of any machine that ran it (thehackernews.com, bleepingcomputer.com). The files were live for about 94 …

GlassWorm technology cloud services