Collaborate Disseminate
By Waqas
Apart from displaying these messages, the packages performed no other actions. This indicates that these aren’t malicious per se.
This is a post from HackRead.com Read the original post: New Protestware Uses npm Packages to Call for Peace in G… Continue reading New Protestware Uses npm Packages to Call for Peace in Gaza and Ukraine
The security world held our collective breaths early this week for the big OpenSSL vulnerability announcement. Turns out it’s two separate issues, both related to punycode handling, and they’ve been …read more Continue reading This Week in Security: OpenSSL Fizzle, Java XML, and Nothing As It Seems
It seems I have made my tiny, indelible mark on internet security history, with the term “protestware“. As far as I can tell, I first coined this particular flavor of …read more Continue reading This Week in Security: More Protestware, Another Linux Vuln, and TLStorm
Researchers are tracking a number of open-source “protestware” projects on GitHub that have recently altered their code to display “Stand with Ukraine” messages for users, or basic facts about the carnage in Ukraine. The group also is tracking several code packages that were recently modified to erase files on computers that appear to be coming from Russian or Belarusian Internet addresses. Continue reading Pro-Ukraine ‘Protestware’ Pushes Antiwar Ads, Geo-Targeted Malware