4 ms·
Typo in title. Current title of HN post says: > SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM Should be Shai-Hulud, not SHA
by QuantumNomad_ 11mo ago
Typo in title. Current title of HN post says:
> SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM
Should be Shai-Hulud, not SHA1-Hulud.
- adzm 11mo agoThat said, the secrets are uploaded to a repo named `Sha1-Hulud: The Second Coming`
- zahlman 11mo agoAh, I missed that detail.
- zahlman 11mo agoI don't know why you were downvoted. The actual page does not say SHA1, the attack as far as I know is not related to the SHA1 algorithm, and the name of the worm isn't intended as that sort of pun.
- pezezin 11mo agoThe worm itself is posting the secrets in Github with the name Sha1-hulud: https://github.com/search?q=sha1-hulud&type=repositories https://github.com/search?q=sha1-hulud&type=repositories
- cyberpunk 11mo agoYikes. AWS secrets galore in the couple I decoded (double base64)... I'm surprised github is leaving these up.
- galangalalgol 11mo agoAt this point it likely helps the defenders more than those that would use them doesn't it?
- deleted 11mo ago[deleted]
- meowface 11mo agoI am guessing they don't intend to and will be removing them with urgency.
- AlexandrB 11mo agoAlso "coming" only has one "m". Or is this some kind of pun?