OTX Threat: PolinRider Spreads Through Compromised GitHub Accounts and Packagist
AI Summary
PolinRider operators compromised a GitHub account to insert malicious code into development versions of visanduma/nova-two-factor, a Packagist package with over 700,000 downloads. The campaign spreads through compromised developer accounts and Git repositories across multiple ecosystems including npm, PyPI, Go modules, Packagist, and Chrome extensions. The operators use Git history rewriting, payl Sectors: Technology
Discussion
Sign in to join the discussion.
Loading comments…