XZ Utils-Like Takeover Attempt Targets the OpenJS Foundation

The OpenJS Foundation, which oversees multiple JavaScript projects, thwarted a takeover attempt of at least one project that has echoes of the dangerous backdoor found in versions of the XZ Utils data compression library that failed only because a Microsoft engineer incidentally discovered it. The malicious code targeting XZ Utils was put together over two..

The post XZ Utils-Like Takeover Attempt Targets the OpenJS Foundation appeared first on Security Boulevard.

application security backdoor code compression cybersecurity data data compression data privacy data security devops engineer found foundation industry spotlight javascript library malicious microsoft mobile security network security openjs openjs foundation open source security project projects security boulevard (original) social engineering social - facebook social - linkedin social - x software supply chain security spotlight takeover targeting xz utils