Supply chain attack alert: .github/setup.js 2 months ago
FYI we released a discovery and mitigation tool today: https://github.com/Team-Rockstars-Security/antimiasma
HN user
FYI we released a discovery and mitigation tool today: https://github.com/Team-Rockstars-Security/antimiasma
We're working on an antiworm. One of our customers got affected.
Our tool already discovers infected repositories and mitigates/removes the implants from the filesystem.
Please revoke/rotate all your tokens and passwords that were used in the infected repositories, the worm is pretty sophisticated.