Skip to content
Open Source: It’s turtles all the way down.
bugcrowd.com | blog | #cloud | #supply-chain | #open-source | #npm | #casey-ellis | #software-security | #nodejs | #trojan
Summary
Open source fuels modern software but breeds supply-chain risk: an attacker tricked his way into maintaining a 2M-install node.js library and shipped a trojan stealing crypto wallet credentials.
- Published
- Collected