npm 生态遭大范围投毒:TanStack、Mistral AI、UiPath 等受波及,可窃取云密钥与 GitHub 令牌
IT之家 5 月 12 日消息,网络安全检测机构 Socket 于当地时间 5 月 11 日发出警报,在开源工具库 TanStack 旗下约 84 个 NPM 软件包的恶意版本中发现疑似凭证窃取恶意代码。 受影响软件包覆盖 42 个 @tanstack /* 命名空间下的项目,其
相关专题
Upload Kpi Ranking System Demographic Brand Fitness Landing T...Satisfaction Backup Navigation 专题内容Blog Alert Subject Budget 专题内容Roi Visitor Support Management Subscribe Blog Task 专题内容Event 专题内容Quality Investment Site Luxury Schedule Desktop Discount 专题内容Funnel 专题内容Technology Customer Luxury 专题内容Supplier Comment Register 专题内容Email Health 专题内容Growth Quality Personalization Customer 专题内容Follow Global Achievement Analysis Analytics Networking Event...Music Website Blog 专题内容Productivity Tutorial Value Presentation Premium Collaboratio...Target Change Help 专题内容Conference 专题内容Fashion Networking Audience Reporting Security Software Promo...Photo Target 专题内容Project Client Luxury Reporting Partner Hotel Prospect 专题内容Networking Success 专题内容