News Wired: A Developer Altered Open Source Software to Wipe Files in Russia

[AntonK]

Careful out there...

 

[Tech9]

Careful out there...

This source requires an account to read. Here is another one, perhaps about the same:

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus

When code with millions of downloads nukes user files, bad things can happen.

arstechnica.com

 

[Clark Griswald]

OP's link opened without issues.

 

[Tech9]

Sound like regional discrimination.

 

[capncybo]

Sound like regional discrimination.

View attachment 40292

That's funny... regional discrimination was how the malware decided to execute in the first place ;-)

 

[RMerlin]

This source requires an account to read. Here is another one, perhaps about the same:

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus

When code with millions of downloads nukes user files, bad things can happen.

arstechnica.com

The Wired article mentions that their article was derived from the Ars Technica article, so best to link the actual source than a rehashed version.

 

[Yota]

Sound like regional discrimination.

try this: https://web.archive.org/web/2022031...open-source-software-to-wipe-files-in-russia/

 

[sfx2000]

The takeaway from the exercise is that one has to really "own" their software bill of materials with regards to configuration management.

Blindly pulling in a 3rd party module/component into production without any QA testing - one is asking for trouble there.