{ads}

›

Packagist Repository Hacked: Over a Dozen PHP Packages with 500 Million Compromised

Written By Friday, 5 May 2023 Add Comment



May 05, 2023 at 03:22PM

PHP software package repository Packagist revealed that an "attacker" gained access to four inactive accounts on the platform to hijack over a dozen packages with over 500 million installs to date. "The attacker forked each of the packages and replaced the package description in composer.json with their own message but did not otherwise make any malicious changes," Packagist's Nils Adermann said

from The Hacker News https://ift.tt/pSW1Psx

0 Response to "Packagist Repository Hacked: Over a Dozen PHP Packages with 500 Million Compromised"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads