schizoidman@lemmy.zip to Technology@lemmy.worldEnglish · edit-22 days agoNotepad++ updater installed malwarewww.heise.deexternal-linkmessage-square46linkfedilinkarrow-up1353arrow-down114file-text
arrow-up1339arrow-down1external-linkNotepad++ updater installed malwarewww.heise.deschizoidman@lemmy.zip to Technology@lemmy.worldEnglish · edit-22 days agomessage-square46linkfedilinkfile-text
minus-squareasbestos@lemmy.worldlinkfedilinkEnglisharrow-up17arrow-down1·1 day agoSo the private key was left in the Github source code and nobody caught it? Or was it the public key? (which makes this statement way less impactful)
minus-squareSamskara@sh.itjust.workslinkfedilinkEnglisharrow-up13arrow-down1·1 day agoPrivate key probably. Only the public key is not enough to sign the package.
So the private key was left in the Github source code and nobody caught it? Or was it the public key? (which makes this statement way less impactful)
Private key probably. Only the public key is not enough to sign the package.