THREATPKG
SYNC STALE
Supply-chain threat intelligence
Incident detail
criticalgo·credential theft·osv
Malicious code in github.com/BufferZoneCorp/go-weather-sdk (Go)
Risk score
92
AI summary
Indexed incident for github.com/BufferZoneCorp/go-weather-sdk (go).
Description
-= Per source details. Do not edit below this line.=-
Source: google-open-source-security (a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e)
This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters.
The packages in this cluster steal credentials, set up ssh access and tamper with build/workflow environmetn variables.
Technical details
Affected versions
*
Timeline
- Advisory published
- Indexed by ThreatPkg