156
FOSS project attacks on Github, malware injected in forks ransomware Linux machines (mhouge.dk)
submitted 2 years ago* (last edited 2 years ago) by to c/linux@lemmy.ml
36 comments fedilink hide all child comments
 

Apparently there's a bunch of projects getting hit with this, fairly obscure ones though. Project gets forked, suddenly get a pile of stars more than the original, and then there's a curl-bash pipe inserted into it that runs some ransomeware that encrypts ~/Documents.

About a dozen other projects linked in here from another developer (excuse the Reddit link): https://old.reddit.com/r/golang/comments/1jbzuot/someone_copied_our_github_project_made_it_look/

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 3 points 2 years ago (3 children)

Many of the projects are backend dev tools, like the Atlas provider linked in the thread.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 38 points 2 years ago* (2 children)

    But that's not a supply chain attack. If projects or platforms are compromised and THEN their code is used by normal means of ingestion of said project, that would be a supply chain attack.

    These are unofficial channels created as forks of existing projects in an attempt to fool users into using these instead.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •