Socket exposes a clever cross-ecosystem supply chain attack targeting PHP packages by hiding a malicious JS postinstall backdoor inside package.json.
  • SavinDWhales@lemmy.worldEnglish
    3·
    13 days ago

    That website is malicious. First thing after loading: allow notifications?

    Couldn’t get past the cookie banner, so…