Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
thejaybird
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
4 ms
·
1.
▲
by
thejaybird
3mo ago
For me i feel the attack vector is Public repo > infect by merge > github runner picks up and gets infected > and github action (from a repo) that then runs on runner getw effected
2.
▲
by
thejaybird
3mo ago
Take the JS file and decode it! Decoded execution chain ----------------------- 1. Outer layer: - Starts with try{eval(function(s,n){...})([large numeric array].map(...).join(""),1)) - Converts numeric character codes into a