social.coop

47 posts35 participants0 posts today

Jake in the desertAs 'AI' coding 'assistants' invent nonexistent software libraries to download and use, enterprising attackers create and upload libraries with those names—laced with malware <a href="https://www.theregister.com/2025/04/12/ai_code_suggestions_sabotage_supply_chain" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.theregister.com/2025/04/12/ai_code_suggestions_sabotage_supply_chain</a><a href="https://c.im/tags/coding" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#coding</a> <a href="https://c.im/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> <a href="https://c.im/tags/AIBullshit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AIBullshit</a> <a href="https://c.im/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a>

The New OilNew <a href="https://mastodon.thenewoil.org/tags/ResolverRAT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ResolverRAT</a> <a href="https://mastodon.thenewoil.org/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> targets <a href="https://mastodon.thenewoil.org/tags/pharma" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pharma</a> and <a href="https://mastodon.thenewoil.org/tags/healthcare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#healthcare</a> orgs worldwide<a href="https://www.bleepingcomputer.com/news/security/new-resolverrat-malware-targets-pharma-and-healthcare-orgs-worldwide/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/new-resolverrat-malware-targets-pharma-and-healthcare-orgs-worldwide/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

beardedtechguy@infosec:~$ResolverRAT is distributed through phishing emails claiming to be legal or copyright violations tailored to languages that match the target's country.New ResolverRAT malware targets pharma and healthcare orgs worldwide <a href="https://www.bleepingcomputer.com/news/security/new-resolverrat-malware-targets-pharma-and-healthcare-orgs-worldwide/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/new-resolverrat-malware-targets-pharma-and-healthcare-orgs-worldwide/</a><a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a>

Schneier on Security RSSSlopsquattingAs AI coding assistants invent nonexistent software libraries to download and use, enterprising attackers create and upload libraries with those names&... <a href="https://www.schneier.com/blog/archives/2025/04/slopsquatting.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.schneier.com/blog/archives/2025/04/slopsquatting.html</a> <a href="https://burn.capital/tags/Uncategorized" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Uncategorized</a> <a href="https://burn.capital/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://burn.capital/tags/LLM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LLM</a> <a href="https://burn.capital/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a>

StanceOfMindChinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool<a href="https://thehackernews.com/2025/04/chinese-hackers-target-linux-systems.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://thehackernews.com/2025/04/chinese-hackers-target-linux-systems.html</a> <a href="https://tech.lgbt/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> <a href="https://tech.lgbt/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> <a href="https://tech.lgbt/tags/Hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hacking</a> <a href="https://tech.lgbt/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://tech.lgbt/tags/China" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#China</a> <a href="https://tech.lgbt/tags/Tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tech</a> <a href="https://tech.lgbt/tags/IT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IT</a>

Quad9DNSWe’re seeing an increasing volume of blocked queries to the SocGholish-related domain - blackshelter[.]org in the last several days. <a href="https://mastodon.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> <a href="https://mastodon.social/tags/SocGholish" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SocGholish</a> <a href="https://mastodon.social/tags/ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ransomware</a> <a href="https://mastodon.social/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

AAKLPalo Alto, from yesterday: Slow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python Malware <a href="https://unit42.paloaltonetworks.com/slow-pisces-new-custom-malware/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://unit42.paloaltonetworks.com/slow-pisces-new-custom-malware/</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://infosec.exchange/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a>

not Evander SinqueEs gibt nichts zu sehen, bitte gehen Sie weiter. <a href="https://mastodon.social/tags/microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#microsoft</a> <a href="https://mastodon.social/tags/keylogger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keylogger</a> <a href="https://mastodon.social/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a>

alecmThe Pall Mall Pact and why it matters | Malwarebytes | …I don’t entirely agree that this is a good thingSpeaking as an <a href="https://en.wikipedia.org/wiki/Crack_(password_software)" rel="nofollow noopener noreferrer" target="_blank">author of “hacking tools” which have inspired the “hacking tools” of today</a> — tools used by the kinds of people who *found* companies like Malwarebytes — I find perspectives such as this to be problematic, hypocritical, and lacking in dual-use perspective:<blockquote>Commercial hacking tools have enabled intrusive surveillance practices that undermine fundamental freedom and human rights.</blockquote> With a starting position like this, I worry about where we may end up for software freedom. The ITAR encryption regime and the Wassenaar “export control of malware” debacle need not be repeated.<a href="https://www.malwarebytes.com/blog/news/2025/04/the-pall-mall-pact-and-why-it-matters" rel="nofollow noopener noreferrer" target="_blank">https://www.malwarebytes.com/blog/news/2025/04/the-pall-mall-pact-and-why-it-matters</a><a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://alecmuffett.com/article/tag/hacking-tools" target="_blank">#hackingTools</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://alecmuffett.com/article/tag/malware" target="_blank">#malware</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://alecmuffett.com/article/tag/pall-mall-pact" target="_blank">#pallMallPact</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://alecmuffett.com/article/tag/pall-mall-process" target="_blank">#pallMallProcess</a>

Andrew 🌻 Brandt 🐇Last week I posted a thread about a <a href="https://infosec.exchange/tags/spam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spam</a> campaign delivering a <a href="https://infosec.exchange/tags/ConnectWise" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ConnectWise</a> client as its payload. As of this morning, the threat actors have changed the payload (<a href="https://www.virustotal.com/gui/file/30e1d059262b851a2b432ec856aeba5bb639ba764aa85643703163d62000a2f4" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.virustotal.com/gui/file/30e1d059262b851a2b432ec856aeba5bb639ba764aa85643703163d62000a2f4</a>) and it appears to try to connect to the address "relay.noscreener[.]info" which resolves to 104.194.145.66.Embedded in the installer .msi file is a file called system.config, which contains this domain name and a base64-encoded string.The fake Social Security website is still being hosted on a compromised site that belongs to a temp agency based on the east coast of the US.Previous thread:<a href="https://infosec.exchange/@threatresearch/114315246724920453" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://infosec.exchange/@threatresearch/114315246724920453</a><a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a> <a href="https://infosec.exchange/tags/malspam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malspam</a>

Pyrzout :vm:New malware ‘ResolverRAT’ targets healthcare, pharmaceutical firms – Source: securityaffairs.com <a href="https://ciso2ciso.com/new-malware-resolverrat-targets-healthcare-pharmaceutical-firms-source-securityaffairs-com/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ciso2ciso.com/new-malware-resolverrat-targets-healthcare-pharmaceutical-firms-source-securityaffairs-com/</a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rssfeedpostgeneratorecho</a> <a href="https://social.skynetcloud.site/tags/informationsecuritynews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#informationsecuritynews</a> <a href="https://social.skynetcloud.site/tags/ITInformationSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITInformationSecurity</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairscom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityAffairscom</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/PierluigiPaganini" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PierluigiPaganini</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityAffairs</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityAffairs</a> <a href="https://social.skynetcloud.site/tags/BreakingNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BreakingNews</a> <a href="https://social.skynetcloud.site/tags/SecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityNews</a> <a href="https://social.skynetcloud.site/tags/hackingnews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hackingnews</a> <a href="https://social.skynetcloud.site/tags/ResolverRat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ResolverRat</a> <a href="https://social.skynetcloud.site/tags/CyberCrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberCrime</a> <a href="https://social.skynetcloud.site/tags/Cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybercrime</a> <a href="https://social.skynetcloud.site/tags/healthcare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#healthcare</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a>

Xavier Ashe :donor:<a href="https://infosec.exchange/tags/VXUnderground" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VXUnderground</a> has posted a "best of" page with their favorite papers. I think some of these should be required reading for red teamers, malware researchers, or vulnerability researchers. Thoughts? <a href="https://vx-underground.org/Best%20Of" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://vx-underground.org/Best%20Of</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://infosec.exchange/tags/malware_research" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware_research</a> <a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a>

Colin PurringtonWould anyone be willing to give me some Wordpress advice? A guy *claiming* to be from Bluehost just called and said my hosted site has malware, then offered me $360/yr protection plan. Refused to say anything about where malware was located or how to fix. Jerk. Bluehost is too expensive already and I'm toying with just pulling the plug on my site altogether (it's not very popular), or maybe porting it over to the $4/month (?) version at wordpress.com. I'd be grateful for any tips on removing malware, finding cheaper host, and whether terminating a blog makes sense. <a href="https://flipping.rocks/tags/wordpress" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#wordpress</a> <a href="https://flipping.rocks/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://flipping.rocks/tags/hosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hosting</a> <a href="https://flipping.rocks/tags/blog" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blog</a>

Hackread.com🚨 Spyware added during manufacturing: Cheap Android phones come preloaded with malware stealing crypto via fake <a href="https://mstdn.social/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WhatsApp</a> and other apps.Read: <a href="https://hackread.com/pre-installed-malware-cheap-android-phones-crypto-fake-whatsapp/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hackread.com/pre-installed-malware-cheap-android-phones-crypto-fake-whatsapp/</a><a href="https://mstdn.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://mstdn.social/tags/Android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Android</a> <a href="https://mstdn.social/tags/Crypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Crypto</a> <a href="https://mstdn.social/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a>

securityaffairsNew <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> ‘<a href="https://infosec.exchange/tags/ResolverRAT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ResolverRAT</a>’ targets <a href="https://infosec.exchange/tags/healthcare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#healthcare</a>, pharmaceutical firms <a href="https://securityaffairs.com/176537/malware/new-malware-resolverrat-targets-healthcare-pharmaceutical-firms.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://securityaffairs.com/176537/malware/new-malware-resolverrat-targets-healthcare-pharmaceutical-firms.html</a> <a href="https://infosec.exchange/tags/securityaffairs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#securityaffairs</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a>

LavX NewsMicrosoft's 0x80070643 Error: A Deep Dive into Windows Recovery Environment ChallengesMicrosoft has confirmed that the 0x80070643 error encountered by Windows users during the April 2025 WinRE update is misleading and does not affect system functionality. This article explores the impl...<a href="https://news.lavx.hu/article/microsoft-s-0x80070643-error-a-deep-dive-into-windows-recovery-environment-challenges" rel="nofollow noopener noreferrer" target="_blank">https://news.lavx.hu/article/microsoft-s-0x80070643-error-a-deep-dive-into-windows-recovery-environment-challenges</a><a href="https://mastodon.cloud/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a> <a href="https://mastodon.cloud/tags/tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tech</a> <a href="https://mastodon.cloud/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://mastodon.cloud/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> <a href="https://mastodon.cloud/tags/WindowsUpdate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WindowsUpdate</a>

AAKLMorphisec: New Malware Variant Identified: ResolverRAT Enters the Maze <a href="https://www.morphisec.com/blog/new-malware-variant-identified-resolverrat-enters-the-maze/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.morphisec.com/blog/new-malware-variant-identified-resolverrat-enters-the-maze/</a> <a href="https://bird.makeup/users/morphisec" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@morphisec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a>

OTX BotSlow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python MalwareSlow Pisces, a North Korean state-sponsored threat group, has launched a campaign targeting cryptocurrency developers using LinkedIn recruitment schemes and malicious coding challenges. The group impersonates recruiters, sending benign PDFs with job descriptions followed by coding tasks linked to compromised GitHub repositories. These repositories contain malware disguised as legitimate projects, using techniques like YAML deserialization and EJS rendering to execute malicious code. The campaign introduces new malware named RN Loader and RN Stealer, which gather victim information and potentially establish persistent access. This sophisticated approach has reportedly led to over $1 billion in cryptocurrency theft in 2023 alone.Pulse ID: 67fce4dbd05e59dcedb21adc Pulse Link: <a href="https://otx.alienvault.com/pulse/67fce4dbd05e59dcedb21adc" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://otx.alienvault.com/pulse/67fce4dbd05e59dcedb21adc</a> Pulse Author: AlienVault Created: 2025-04-14 10:35:07Be advised, this data is unverified and should be considered preliminary. Always do further verification.<a href="https://social.raytec.co/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://social.raytec.co/tags/GitHub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GitHub</a> <a href="https://social.raytec.co/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://social.raytec.co/tags/Korea" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Korea</a> <a href="https://social.raytec.co/tags/LinkedIn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LinkedIn</a> <a href="https://social.raytec.co/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> <a href="https://social.raytec.co/tags/NorthKorea" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NorthKorea</a> <a href="https://social.raytec.co/tags/OTX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OTX</a> <a href="https://social.raytec.co/tags/OpenThreatExchange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenThreatExchange</a> <a href="https://social.raytec.co/tags/PDF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PDF</a> <a href="https://social.raytec.co/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://social.raytec.co/tags/bot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bot</a> <a href="https://social.raytec.co/tags/cryptocurrency" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptocurrency</a> <a href="https://social.raytec.co/tags/developers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#developers</a> <a href="https://social.raytec.co/tags/AlienVault" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AlienVault</a>

rexi<a href="https://www.theregister.com/AMP/2025/04/12/ai_code_suggestions_sabotage_supply_chain/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.theregister.com/AMP/2025/04/12/ai_code_suggestions_sabotage_supply_chain/</a>create a malicious software package under a hallucinated package name and then upload the bad package…when an <a href="https://mastodon.social/tags/AIcodeassistant" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AIcodeassistant</a> re-hallucinates the co-opted name, the process of installing dependencies and executing the code will run the <a href="https://mastodon.social/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a>……a form of typosquatting, where variations or misspellings of common terms are used to dupe people. Seth Michael Larson, <a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> Software Foundation, has dubbed it <a href="https://mastodon.social/tags/slopsquatting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#slopsquatting</a> – "slop" being a common pejorative for AI output

kalvnL'IA invente parfois des noms de packages qui n'existent pas et essayent de les télécharger (vibe coding, tout ça). Alors des gens ont créé ces packages sous forme de malware. Évidemment.🔗 <a href="https://www.theregister.com/AMP/2025/04/12/ai_code_suggestions_sabotage_supply_chain/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.theregister.com/AMP/2025/04/12/ai_code_suggestions_sabotage_supply_chain/</a><a href="https://mastodon.xyz/tags/intelligenceartificielle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#intelligenceartificielle</a> <a href="https://mastodon.xyz/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://mastodon.xyz/tags/package" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#package</a>

Recent searches

Search options

Administered by:

Server stats:

#malware