TLDR Tech / Practical
Reactime open source tool compromised by North Korean malware
The open-source React debugging tool Reactime has been compromised with a North Korean implant, according to Deep Woods Security researchers. The malware affects twenty of the tool's twenty-two branches. It activates through a concealed VS Code task when the repository is opened, utilizing Ethereum transactions for command and control and embedding itself into Electron applications like VS Code and Discord for persistence. None of the five submitted malware samples were detected by VirusTotal.
Read the full story