نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Sonatype Blog

PolinRider Loader Reappears in Hijacked npm Packages

TL;DR Sonatype Research Labs identified concealed runtime loaders in 12 npm releases across 10 hijacked packages. All 12 releases contain loaders designed to decode payload-server IP addresses from Ethereum transactions sent by the same hard-coded wallet previously reported in PolinRider activity, then retrieve, XOR-decode, and execute JavaScript. Six conceal the loader in eval(atob(...)); six use a character-permuta…

بدافزار و آلودگی برنامه‌نویسی و زبان‌ها شبکه و اینترنت متن‌باز
خواندن متن کامل در Sonatype Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
EFF

Join EFF to Celebrate the Life of Aaron Swartz

Join us to celebrate the legacy of Aaron Swartz on Nov. 8, 2026. With the organizers of Aaron Swartz Day, we’re honoring his life with an in-person and remote hackathon. This event is supported by several organizations that carry on his work, including the Internet Archive—which is hosting the in-person event—the Freedom of the Press Foundation, Creative Commons and the Free Law Project. Aaron Swartz was a digital ri…

پایگاه داده متن‌باز حریم خصوصی
منبع
CSO Online

Binance heist is stark example of AI governance gaps and basic security failures

A chain of avoidable technical and human security failures enabled the largest crypto heist on record, the theft of approximately $6.34 billion from Binance. The improper monitoring and access scoping of an internal AI tool played a major role in helping the hackers, and should serve as a warning for enterprise CISOs to take AI governance seriously. Binance’s initial findings report, published Nov. 3, describes a mon…

بدافزار و آلودگی آسیب‌پذیری و روز صفر نشت داده
منبع