GitHub ntsib ntau malware tawm tsam cuam tshuam txog cov haujlwm, suav nrog crypto

Tus tsim tawm loj platform GitHub tau ntsib qhov kev tawm tsam ntau ntawm malware thiab tshaj tawm 35,000 "code hits" nyob rau ib hnub uas pom ntau txhiab tus Solana-raws li hnab nyiaj tau poob rau ntau lab nyiaj.

Qhov kev tawm tsam thoob plaws tau nthuav tawm los ntawm GitHub tus tsim tawm Stephen Lucy, uas tau tshaj tawm qhov xwm txheej ua ntej hnub Wednesday. Tus tsim tawm tuaj hla qhov teeb meem thaum tshuaj xyuas qhov project nws pom hauv Google tshawb.

Kuv tab tom nthuav tawm dab tsi zoo li yog qhov kev tawm tsam malware loj heev @github.
- Tam sim no tshaj 35k qhov chaw khaws cia tau kis tus kab mob
- Txog tam sim no pom hauv cov haujlwm suav nrog: crypto, golang, python, js, bash, docker, k8s
- Nws tau ntxiv rau npm scripts, docker dluab thiab nruab docs pic.twitter.com/rq3CBDw3r9
— Stephen Lacy (@stephenlacy) Lub yim hli ntuj 3, 2022

Txog tam sim no, ntau yam haujlwm - los ntawm crypto, Golang, Python, JavaScript, Bash, Docker thiab Kubernetes - tau pom tias muaj kev cuam tshuam los ntawm kev tawm tsam. Lub malware nres yog tsom rau ntawm docker dluab, nruab docs thiab NPM tsab ntawv, uas yog ib txoj hauv kev yooj yim rau bundle cov lus txib ntawm lub plhaub rau ib qhov project.

Txhawm rau dupe cov neeg tsim khoom thiab nkag mus rau cov ntaub ntawv tseem ceeb, tus neeg tawm tsam thawj zaug tsim lub chaw khaws ntaub ntawv cuav (chaw khaws cia muaj tag nrho cov haujlwm ntawm cov ntaub ntawv thiab txhua cov ntaub ntawv kho dua tshiab) thiab thawb clones ntawm cov haujlwm raug cai rau GitHub. Piv txwv li, ob lub snapshots hauv qab no qhia txog qhov project crypto miner legit thiab nws cov clone.

*Original crypto mining project. Source: Github*

*Cloned crypto mining project. Source: Github*

Ntau ntawm cov chaw khaws cia clone no tau raug thawb raws li "rub kev thov," uas cia cov neeg tsim khoom qhia rau lwm tus txog kev hloov pauv uas lawv tau thawb mus rau ib ceg hauv qhov chaw cia khoom ntawm GitHub.

Thaum tus tsim tawm ntog rau cov malware tawm tsam, tag nrho ib puag ncig hloov pauv (ENV) ntawm tsab ntawv, daim ntawv thov lossis lub laptop (Electron apps) raug xa mus rau tus neeg tua neeg lub server. ENV suav nrog cov yuam sij kev nyab xeeb, Amazon Web Services nkag mus rau cov yuam sij, cov yuam sij crypto thiab ntau ntxiv.

Tus tsim tawm tau tshaj tawm qhov teeb meem rau GitHub thiab qhia cov neeg tsim khoom rau GPG-kos npe lawv cov kev hloov kho uas tau ua rau lub chaw cia khoom. GPG cov yawm sij ntxiv ib txheej ntxiv ntawm kev ruaj ntseg rau GitHub cov nyiaj thiab cov phiaj xwm software los ntawm kev muab txoj hauv kev tshawb xyuas txhua qhov kev hloov kho los ntawm qhov chaw ntseeg siab.