Chromium repository used by browser developers accidentally contained test malware

guest · Nov 19, 2021

Chromium repository used by browser developers accidentally contained test malware, Chrome users not impacted
November 19, 2021
https://9to5google.com/2021/11/19/chromium-test-malware/

Google this afternoon alerted Chromium developers about the possibility that they were exposed to malware used for testing due to an internal “oversight.”

The open-source nature of Chromium means that anybody can take the code to create their own browser. That Chromium source code repository from September 9 to November 18 contained “some test Office documents that included some unshielded malware.” Google notified Chromium developers of this error in an email on Friday afternoon.

These samples were inadvertently committed to the repository without obfuscation in the process of testing the security feature to detect the presence of malware distributed through macros in Office documents. These test files were not included in any Chrome release.
Click to expand...

Google explicitly says that users of Chrome and other Chromium-based browsers, e.g. Microsoft Edge, are not impacted. Specifically, “Chromium/Chrome does not, and has never included any of these files, so users of those products are at no risk.”

That said, the Windows malware was five years old and the .doc and .docx test files in question have to be manually opened to cause infection.
Click to expand...

As such, the company believes that it’s “exceedingly unlikely that any contributors were infected by this malware” and that there have been no “reports of any contributors being infected by opening these files.”

We apologize for the oversight on our end and are reviewing our processes to help ensure that potentially dangerous binary files committed to the repo are properly shielded from accidental opening.
Click to expand...

Log in or Sign up

Chromium repository used by browser developers accidentally contained test malware

guest Guest

Log in or Sign up

Chromium repository used by browser developers accidentally contained test malware

guest Guest

Useful Searches