CocoaPods, a widely-used dependency manager for iOS and macOS applications, has been found to harbor three critical vulnerabilities, exposing almost all Apple devices to potential supply chain attacks. These vulnerabilities, which went unnoticed for nearly a decade, could have allowed attackers to inject malware into apps. Discovered by cybersecurity experts at EVA Information Security, these […]
A serious security threat has been discovered on GitHub, the popular software development platform. Over 100,000 projects are potentially compromised with malicious code. This could lead to stolen data, corrupted systems, and even ransomware attacks for unsuspecting users. Chronology of the GitHub Malware Infection May 2023: The malware first appears on a website called PyPI. […]