{ads}

›

LottieFiles Issues Warning About Compromised "lottie-player" npm Package

Written By Thursday 31 October 2024 Add Comment



October 31, 2024 at 07:46PM

LottieFiles has revealed that its npm package "lottie-player" was compromised as part of a supply chain attack, prompting it to release an updated version of the library. "On October 30th ~6:20 PM UTC - LottieFiles were notified that our popular open source npm package for the web player @lottiefiles/lottie-player had unauthorized new versions pushed with malicious code," the company said in a

from The Hacker News https://ift.tt/KNIEGRk

0 Response to "LottieFiles Issues Warning About Compromised "lottie-player" npm Package"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads