Malicious Bun Script Found in NPM Package Bumps

5 pointskothariji4mo ago1 comments

*`package.json` includes a `preinstall` script running `node setup_bun.js`, along with `setup_bun.js` and `bun_environment.js` files that appear to contain the malware.*

1 comments

abby12124mo ago

For more info - https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-...

j / k navigate · click thread line to collapse

Malicious Bun Script Found in NPM Package Bumps

5 pointskothariji4mo ago1 comments

*`package.json` includes a `preinstall` script running `node setup_bun.js`, along with `setup_bun.js` and `bun_environment.js` files that appear to contain the malware.*

1 comments

abby12124mo ago

For more info - https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-...

j / k navigate · click thread line to collapse