3 ms·
This attack started out as a social engineering attack. The attacker, posing as a maintainer, took over maintainership of the event-stream module. How is this
by mdekkers 8y ago
This attack started out as a social engineering attack. The attacker, posing as a maintainer, took over maintainership of the event-stream module.
How is this even possible? Shouldn't repo's like this have some serious security measures in place?
- robin_reala 8y agoThe owner didn’t want to maintain it and gave it to the attacker when they asked.
- ToFab123 8y agoMany repos is just one or two people that work on it in their spare time.