4 ms·
It looks like a script was added (insertion.js) that inserts a script from https://unpkg.com https://unpkg.com. https://pastebin.com/q9xT21Xr https://pastebin.
by joshschreuder 9y ago
It looks like a script was added (insertion.js) that inserts a script from https://unpkg.com https://unpkg.com.
https://pastebin.com/q9xT21Xr https://pastebin.com/q9xT21Xr
The script seems to be blacklisted currently, but the new code has a changing hash based on time since install which I think allows the hack to continue working after it has been blacklisted.
I am hoping I am safe as uBlock caught the script before it could be executed due to it coming from 3rd party domain.
https://i.imgur.com/0lck7mG.png https://i.imgur.com/0lck7mG.png
- joshschreuder 9y agoWell done to unpkg for being quick to block the malicious packages: https://github.com/unpkg/unpkg.com/commit/ac09a03c75a51997b909a63546f9773ca9aeb837 https://github.com/unpkg/unpkg.com/commit/ac09a03c75a51997b9...