#malware

2 tutorials tagged with "malware"

SleeperGem Attack Hid Malware in Dormant RubyGems Packages for Years Before Striking Developer Machines

The SleeperGem supply chain attack reactivated packages dormant since 2017, impersonated Microsoft's Git Credential Manager, and avoided CI/CD detection. Here's how it worked and what to check on your systems.

devops

Arch Linux AUR Hit by Massive Supply Chain Attack — Over 400 Packages Compromised

A coordinated supply chain attack has compromised hundreds of Arch User Repository packages, injecting infostealers and rootkit-like malware. Here's what server administrators need to know and how to protect your systems.

security