Tick Tock, Your Credentials Are Gone: The Maven Package With a Monthly Theft Schedule

stapp · Mar 15, 2025

Since January 2024, a malicious Maven package masquerading as the popular scribejava-core OAuth library has been quietly lurking on Maven Central. In March 2025, Socket’s threat research team uncovered this ticking time bomb within the Java ecosystem. The legitimate library boasts over 5.5k stars on GitHub and widespread adoption, yet this impostor secretly harvests and exfiltrates OAuth credentials on the 15th day of each month.
Click to expand...

https://socket.dev/blog/malicious-maven-package-exfiltrates-oauth-credentials

Log in or Sign up

Tick Tock, Your Credentials Are Gone: The Maven Package With a Monthly Theft Schedule

stapp Global Moderator

Log in or Sign up

Tick Tock, Your Credentials Are Gone: The Maven Package With a Monthly Theft Schedule

stapp Global Moderator

Useful Searches