schizoidman@lemmy.zip to Technology@lemmy.worldEnglish · edit-26 天前Notepad++ updater installed malwarewww.heise.deexternal-linkmessage-square44fedilinkarrow-up1342arrow-down112file-text
arrow-up1330arrow-down1external-linkNotepad++ updater installed malwarewww.heise.deschizoidman@lemmy.zip to Technology@lemmy.worldEnglish · edit-26 天前message-square44fedilinkfile-text
minus-squareasbestos@lemmy.worldlinkfedilinkEnglisharrow-up18arrow-down1·6 天前So the private key was left in the Github source code and nobody caught it? Or was it the public key? (which makes this statement way less impactful)
minus-squareSamskara@sh.itjust.workslinkfedilinkEnglisharrow-up14arrow-down1·6 天前Private key probably. Only the public key is not enough to sign the package.
So the private key was left in the Github source code and nobody caught it? Or was it the public key? (which makes this statement way less impactful)
Private key probably. Only the public key is not enough to sign the package.