#Rspack: a popular alternative to webpack - a JavaScript bundler written in Rust - #npm package with 300,000+ downloads/week version 1.1.7 compromised with attackers injecting cryptocurrency mining malware:
#SoftwareSupplyChainSecurity
👇
https://thehackernews.com/2024/12/rspack-npm-packages-compromised-with.html
Sam Stepanyan :verified: 🐘 /
npub18d…rltg5
2024-12-20 11:05:40
Author Public Key
npub18d0arwv295u03fd825dvn5eharfx25rtrkemffxnar9dzn82drtssrltg5Published at
2024-12-20 11:05:40Event JSON
{
"id": "6805d75f67ff99e9b0101eed09b6325b20ad7f57e1102d87c6dd22e3ec09e2c3",
"pubkey": "3b5fd1b98a2d38f8a5a7551ac9d337e8d265506b1db3b4a4d3e8cad14cea68d7",
"created_at": 1734692740,
"kind": 1,
"tags": [
[
"t",
"rspack"
],
[
"t",
"npm"
],
[
"t",
"SoftwareSupplyChainSecurity"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/113684823440606600",
"activitypub"
]
],
"content": "#Rspack: a popular alternative to webpack - a JavaScript bundler written in Rust - #npm package with 300,000+ downloads/week version 1.1.7 compromised with attackers injecting cryptocurrency mining malware:\n#SoftwareSupplyChainSecurity\n👇\nhttps://thehackernews.com/2024/12/rspack-npm-packages-compromised-with.html",
"sig": "d38eba09507545bf9da5b21f5c73e1650712fda88f2766e845f25a659d0f40476a3c12cac5fe4ee4a927c1f76ad0ad406641a1bb123cbbf387b2a2e5298ca8c5"
}