Backdoor code found in popular Bootstrap-Sass Ruby library

guest · Apr 5, 2019

Backdoor code found in popular Bootstrap-Sass Ruby library
Bootstrap-Sass Ruby library had been downloaded more than 28 million times. Backdoored version only 1,470 times
April 5, 2019
https://www.zdnet.com/article/backdoor-code-found-in-popular-bootstrap-sass-ruby-library/

The library affected by this incident is Bootstrap-Sass, a Ruby package that provides developers with a Sass-version of Bootstrap, the most popular UI framework for developers today.
The backdoor's existence came to light on March 27, last week, [...]
LIBRARY EXPOSED RUBY APPS TO REMOTE CODE EXECUTION
During an examination of the v3.2.03 code released on RubyGems, Barnes spotted what he described "interesting looking code."

This code, when embedded inside a Ruby or Ruby on Rails (popular Ruby framework), would load a cookie file and execute its content, according to a member of cyber-security firm Bad Packets, who confirmed the malicious nature of the library update for ZDNet.

"A quick analysis shows roughly 1,670 GitHub repositories that may have been exposed to the malicious library through direct use," said cyber-security firm Snyk, which also analyzed the backdoor.
Click to expand...

Log in or Sign up

Backdoor code found in popular Bootstrap-Sass Ruby library

guest Guest

Log in or Sign up

Backdoor code found in popular Bootstrap-Sass Ruby library

guest Guest

Useful Searches