Do not trust anything I write down. I have this horrible habit of not checking sources.

  • 4 Posts
  • 313 Comments
Joined 2 years ago
cake
Cake day: July 3rd, 2023

help-circle



  • A significant supply chain attack hit NPM after 17 popular Gluestack ‘@react-native-aria’ packages with over 1 million downloads were compromised to include malicious code that acts as a remote access trojan (RAT).

    BleepingComputer determined that the compromise began on June 6 at 4:33 PM EST, when a new version of the @react-native-aria/focus package was published to NPM. Since then, 17 of the 20 Gluestack @react-native-aria packages have been compromised on NPM, with the threat actors publishing a new version as recently as two hours ago.