Yhn WarTerrorism first seen 4 d ago, last 10 h ago, peak #6

SubQuery's subql/common 5.8.3 package compromised with stealer

Original: Subql/common 5.8.3 compromised: postinstall stealer in 18k-star SubQuery repo

Version 5.8.3 of subql/common, a package in the widely used SubQuery repository with around 18,000 GitHub stars, has been compromised via a malicious postinstall script that acts as an information stealer. The issue was reported publicly on GitHub, and developers are being warned to avoid the affected version while maintainers respond.

Why now: Supply-chain attacks on popular open-source packages immediately threaten any project that installed the compromised dependency.

SubQuerysubql/commonGitHub

Open on hn →

Evidence

• Subql/common 5.8.3 compromised: postinstall stealer in 18k-star SubQuery repo · forxtrot · 10

API: https://socialmediatrends-api.osmike.com/v1/trends/1519839