Malicious Go and PyPI packages use Gmail and wget to exfiltrate data, wipe Linux disks, and hijack crypto credentials.
  • Dumhuvud@programming.devEnglish
    2·
    2 days ago

    I mean, you can destroy users’ data by doing the equivalent of:

    find "$HOME" -type f -delete

    No idea why they decided to write to /dev/* directly.

    • ulterno@programming.devEnglish
      0·
      12 hours ago

      Can’t delete a drive that I haven’t mounted! :catch_me_if_you_can_vibes:

      But if I haven’t mounted it, why is it connected in the first place? idk