• BTC Dominance: %
XBT.Market
Advertisement
  • Home
  • Coins MarketCap
  • Crypto Exchanges
  • Crypto Calculator
  • Top Gainers and Loser
  • News
  • Contact Us
No Result
View All Result
XBT.Market
No Result
View All Result
Home Bitcoin

GitHub faces widespread malware attacks affecting projects, including crypto

Jon Hartney by Jon Hartney
August 3, 2022
in Bitcoin, Blockchain, Business, Market
0
189
SHARES
1.5k
VIEWS
Share on FacebookShare on Twitter

The developer who found the vulnerability requested developers to sign their revisions with the GPG key to ensure all their revisions on the project can be verified.

Major developer platform GitHub faced a widespread malware attack and reported 35,000 “code hits” on a day that saw thousands of Solana-based wallets drained for millions of dollars.

The widespread attack was highlighted by GitHub developer Stephen Lucy who first reported the incident earlier on Wednesday. The developer came across the issue while reviewing a project he found on a Google search.

Related articles

Bitcoin derivatives data shows room for BTC price to move higher this week

January 23, 2023

Bitcoin price consolidation opens the door for APE, MANA, AAVE and FIL to move higher

January 22, 2023

I am uncovering what seems to be a massive widespread malware attack on @github.

– Currently over 35k repositories are infected
– So far found in projects including: crypto, golang, python, js, bash, docker, k8s
– It is added to npm scripts, docker images and install docs pic.twitter.com/rq3CBDw3r9

— Stephen Lacy (@stephenlacy) August 3, 2022

So far, various projects from crypto, Golang, Python, js, Bash, Docker and Kubernetes were found to be affected by the attack. The malware attack is targeted at the docker images, install docs and npm script, which is a convenient way to bundle common shell commands for a project.

To dupe developers and access critical data, the attacker first creates a fake repository (a repository contains all of the project’s files and each file’s revision history) and pushes clones of legit projects to GitHub. For example, the following two snapshots show this legit crypto miner project and its clone.

Original Crypto Mining Project Source: Github
Cloned Crypto Mining Project Source: Github

Many of these clone repositories were pushed as “pull requests.” Pull requests let developers tell others about changes they have pushed to a branch in a repository on GitHub.

Related: Nomad reportedly ignored security vulnerability that led to $190M exploit

Once the developer falls prey to the malware attack, the entire environment variable (ENV) of the script, application, or laptop (electron apps), is sent to the attacker’s server. ENV includes security keys, AWS access keys, crypto keys and much more.

The developer has reported the issue to GitHub and advised developers to GPG sign their revisions made to the repository. GPG keys add an extra layer of security to your GitHub accounts and software projects by providing a way of verifying all revisions come from a trusted source

Read Entire Article
Tags: CointelegraphCryptocurrencyInvestmentMining Bitcoin
Share76Tweet47

Related Posts

Bitcoin derivatives data shows room for BTC price to move higher this week

by Jon Hartney
January 23, 2023
0

BTC options data suggest that the Bitcoin price rally still has legs, even with wider economic concerns growing and the

Bitcoin price consolidation opens the door for APE, MANA, AAVE and FIL to move higher

by Jon Hartney
January 22, 2023
0

BTC could take a break from its sharp rally and if BTC price bounces off underlying support, APE, MANA, AAVE...

Genesis bankruptcy case scheduled for first hearing

by Jon Hartney
January 22, 2023
0

The first hearing in Genesis Capital's bankruptcy case will be held on January 23, according to court filings

Terra lending protocol Mars to launch mainnet

by Jon Hartney
January 22, 2023
0

The Mars Hub will launch an independent Cosmos application chain and issue MARS to users who hold the token during...

Central African Republic eyes legal framework for crypto adoption

by Jon Hartney
January 22, 2023
0

A 15-member committee is tasked with working on a legal framework that will allow cryptocurrencies to operate in

Load More
  • Trending
  • Comments
  • Latest

Ethereum Classic gets ‘endorsement’ from Vitalik Buterin, but ETC price still risks 50% crash

July 27, 2022

Critique on Helium’s $6.5K monthly revenue causes a stir

July 28, 2022

All aboard! Elon Musk’s Vegas Loop now taking Dogecoin payments

July 7, 2022

Cardano Vasil hard fork hit with another delay for several weeks

July 29, 2022

All aboard! Elon Musk’s Vegas Loop now taking Dogecoin payments

0

Crypto owners banned from working on US Government crypto policies

0

Korean startup Uprise lost $20M shorting LUNC

0

Ethereum testnet Merge mostly successful — ‘Hiccups will not delay the Merge.’

0

Bitcoin derivatives data shows room for BTC price to move higher this week

January 23, 2023

Bitcoin price consolidation opens the door for APE, MANA, AAVE and FIL to move higher

January 22, 2023

Genesis bankruptcy case scheduled for first hearing

January 22, 2023

Terra lending protocol Mars to launch mainnet

January 22, 2023

XBT.Market

This website is an automated news feed powered by the Nebulome cloud system. The site is made possible by YYC TECH Consulting and Alberta Digital Mining Company. As a team with major crypto and bitcoin enthusiasm, we have curated major sources of news, trading and financial data to bring you, our viewer, an unbiased source of truth.

Recent Posts

  • Bitcoin derivatives data shows room for BTC price to move higher this week January 23, 2023
  • Bitcoin price consolidation opens the door for APE, MANA, AAVE and FIL to move higher January 22, 2023
  • Genesis bankruptcy case scheduled for first hearing January 22, 2023
  • Terra lending protocol Mars to launch mainnet January 22, 2023
  • Central African Republic eyes legal framework for crypto adoption January 22, 2023

News Categories

  • Bitcoin
  • Blockchain
  • Business
  • Market

Tags

bitcoinMagzine Cointelegraph Cryptocurrency insidebitcoins Investment Mining Bitcoin NewsBTC

Quicklinks

  • Home
  • Coins MarketCap
  • Crypto Exchanges
  • Crypto Calculator
  • Top Gainers and Loser
  • News
  • Contact Us

© 2022 Xbt.Market - Powered by YYC Tech Consulting & ADMCO.

No Result
View All Result
  • Home
  • Coins MarketCap
  • Crypto Exchanges
  • Crypto Calculator
  • Top Gainers and Loser
  • News
  • Contact Us

© 2022 Xbt.Market by Nebulome.

  • bitcoinBitcoin(BTC)$22,964.00-1.03%
  • ethereumEthereum(ETH)$1,652.12-0.67%
  • USDEXUSDEX(USDEX)$1.07-0.53%
  • tetherTether(USDT)$1.00-0.06%
  • binancecoinBNB(BNB)$327.94-1.11%
  • usd-coinUSD Coin(USDC)$1.00-0.11%
  • rippleXRP(XRP)$0.399454-0.71%
  • Binance USDBinance USD(BUSD)$1.000.00%
  • cardanoCardano(ADA)$0.394413-0.59%
  • dogecoinDogecoin(DOGE)$0.090109-2.31%
  • matic-networkPolygon(MATIC)$1.314.37%
  • OKBOKB(OKB)$44.44-0.61%
  • SolanaSolana(SOL)$23.19-1.68%
  • Lido Staked EtherLido Staked Ether(STETH)$1,649.15-0.67%
  • polkadotPolkadot(DOT)$6.74-2.17%
  • Shiba InuShiba Inu(SHIB)$0.000014-4.12%
  • litecoinLitecoin(LTC)$98.90-1.67%
  • AvalancheAvalanche(AVAX)$20.07-2.59%
  • tronTRON(TRX)$0.0670812.33%
  • UniswapUniswap(UNI)$6.78-2.39%
  • daiDai(DAI)$1.00-0.01%
  • cosmosCosmos Hub(ATOM)$15.102.03%
  • wrapped-bitcoinWrapped Bitcoin(WBTC)$22,976.00-0.80%
  • chainlinkChainlink(LINK)$7.11-0.74%
  • ToncoinToncoin(TON)$2.29-2.17%
  • ethereum-classicEthereum Classic(ETC)$22.61-1.73%
  • leo-tokenLEO Token(LEO)$3.36-0.28%
  • moneroMonero(XMR)$165.58-1.24%
  • bitcoin-cashBitcoin Cash(BCH)$131.05-3.22%
  • Aerarium FiAerarium Fi(AERA)$7.14-13.09%
  • AptosAptos(APT)$15.08-4.33%
  • stellarStellar(XLM)$0.091057-0.97%
  • NEAR ProtocolNEAR Protocol(NEAR)$2.709.24%
  • ApeCoinApeCoin(APE)$5.76-3.03%
  • CronosCronos(CRO)$0.0841281.50%
  • algorandAlgorand(ALGO)$0.2894954.04%
  • Lido DAOLido DAO(LDO)$2.44-6.27%
  • filecoinFilecoin(FIL)$5.37-2.44%
  • QuantQuant(QNT)$139.37-1.51%
  • HederaHedera(HBAR)$0.0752490.55%
  • vechainVeChain(VET)$0.0258240.50%
  • Internet ComputerInternet Computer(ICP)$5.69-2.62%
  • The GraphThe Graph(GRT)$0.176806-17.14%
  • The SandboxThe Sandbox(SAND)$0.85-6.44%
  • FantomFantom(FTM)$0.53-6.87%
  • Axie InfinityAxie Infinity(AXS)$12.013.78%
  • decentralandDecentraland(MANA)$0.76-6.09%
  • AaveAave(AAVE)$86.58-1.47%
  • eosEOS(EOS)$1.09-2.46%
  • FlowFlow(FLOW)$1.14-0.74%
  • MultiversXMultiversX(EGLD)$45.99-1.25%
  • theta-tokenTheta Network(THETA)$1.14-4.76%
  • tezosTezos(XTZ)$1.231.92%
  • Terra Luna ClassicTerra Luna Classic(LUNC)$0.000180-3.09%
  • FraxFrax(FRAX)$1.000.12%
  • paxos-standardPax Dollar(USDP)$0.99-0.05%
  • true-usdTrueUSD(TUSD)$1.00-0.01%
  • huobi-tokenHuobi(HT)$5.36-3.77%
  • Frax ShareFrax Share(FXS)$11.58-9.38%
  • ChilizChiliz(CHZ)$0.158992-1.97%
  • kucoin-sharesKuCoin(KCS)$8.710.15%
  • Curve DAOCurve DAO(CRV)$1.134.22%
  • havvenSynthetix Network(SNX)$2.65-8.58%
  • bitcoin-cash-svBitcoin SV(BSV)$42.58-1.80%
  • ImmutableXImmutableX(IMX)$1.00-5.75%
  • Rocket PoolRocket Pool(RPL)$40.66-4.11%
  • PancakeSwapPancakeSwap(CAKE)$4.662.11%
  • eCasheCash(XEC)$0.0000380.25%
  • USDDUSDD(USDD)$0.99-0.22%
  • dashDash(DASH)$64.32-1.51%
  • BitTorrentBitTorrent(BTT)$0.0000010.05%
  • makerMaker(MKR)$775.29-0.38%
  • BitDAOBitDAO(BIT)$0.590.78%
  • Mina ProtocolMina Protocol(MINA)$0.82-3.80%
  • iotaIOTA(MIOTA)$0.244145-1.87%
  • neoNEO(NEO)$9.252.10%
  • KlaytnKlaytn(KLAY)$0.209310-1.55%
  • Trust WalletTrust Wallet(TWT)$1.55-4.11%
  • GateGate(GT)$4.42-0.46%
  • OptimismOptimism(OP)$2.73-8.06%
  • ArweaveArweave(AR)$11.69-8.49%
  • OsmosisOsmosis(OSMO)$1.101.59%
  • OKCOKC(OKT)$32.622.67%
  • zcashZcash(ZEC)$45.26-3.43%
  • cUSDCcUSDC(CUSDC)$0.0227440.02%
  • gemini-dollarGemini Dollar(GUSD)$1.000.19%
  • GMXGMX(GMX)$67.19-5.52%
  • THORChainTHORChain(RUNE)$1.89-1.95%
  • singularitynetSingularityNET(AGIX)$0.467331-15.59%
  • cDAIcDAI(CDAI)$0.0221580.03%
  • Baby Doge CoinBaby Doge Coin(BABYDOGE)$0.0000005.96%
  • Tokenize XchangeTokenize Xchange(TKX)$6.791.04%
  • RenderRender(RNDR)$1.74-19.63%
  • RadixRadix(XRD)$0.050065-0.60%
  • PAX GoldPAX Gold(PAXG)$1,861.33-0.13%
  • enjincoinEnjin Coin(ENJ)$0.499910-2.97%
  • zilliqaZilliqa(ZIL)$0.030612-0.43%
  • Fetch.aiFetch.ai(FET)$0.468059-12.78%
  • Convex FinanceConvex Finance(CVX)$6.36-4.32%
  • cETHcETH(CETH)$33.20-0.84%