Backdoor in Bootstrap-Sass Gem

submitted by cyber_burn from (zdnet.com)

sorted by:
top
newinsightfulfun
you are viewing a single comment's thread.

view the rest of the comments →

[–]cyber_burn[S] 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (0 children)

i was a minor version and a couple of builds away from getting rekt by this one.

looks like a dev account was compromised, and there was code added to the gem that would allow malicious code to be sent through the http-cookie header and executed on the server with eval.