Eric Lee on Mythryl: “🚨 The Tinycolor package was compromised in a supply chain attack…”

🚨 The Tinycolor package was compromised in a supply chain attack. It uses a postinstall hook in package.json to run a malicious script that steals secrets from your computer and sends them to a hardcoded URL. socket.dev/blog/tinycol...

socket.devPopular Tinycolor npm Package Compromised in Supply Chain At...Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers

16/9/25, 6:48 am0 reposts0 likes

Post