logo
welcome
Ars Technica

Ars Technica

Yearlong supply-chain attack targeting security pros steals 390K credentials

Ars Technica
Summary
Nutrition label

75% Informative

A sophisticated supply-chain attack has been operating for the past year , researchers say.

The campaign uses Trojanized versions of open source software from GitHub and NPM .

It's unclear who the threat actors are or what their motives may be.

An online account on Dropbox contained 390,000 credentials for WordPress websites taken by the attackers.

VR Score

70

Informative language

66

Neutral language

45

Article tone

informal

Language

English

Language complexity

67

Offensive language

possibly offensive

Hate speech

not hateful

Attention-grabbing headline

not detected

Known propaganda techniques

not detected

Time-value

medium-lived

Affiliate links

no affiliate links