Search the index

The Package That Steals the Pipeline That Builds the Package

Install-time credential theft that republishes itself using the rights it steals. Around 1,948 repositories were tied to exfiltration activity.