4 ms·
The hash comes from the source of the package, and in this attack that source was compromised. The malicious code was signed.
by _Adam 8y ago
The hash comes from the source of the package, and in this attack that source was compromised. The malicious code was signed.