๐ [Post of The Day] Remote code execution in Homebrew by compromising the official Cask repository In the Homebrew/homebrew-cask repository, it was possible to merge the malicious pull request by confusing the library that is used in the automated pull request review script developed by the Homebrew project.
Web Excursions 2021-04-25
Web Excursions 2021-04-25
Web Excursions 2021-04-25
๐ [Post of The Day] Remote code execution in Homebrew by compromising the official Cask repository In the Homebrew/homebrew-cask repository, it was possible to merge the malicious pull request by confusing the library that is used in the automated pull request review script developed by the Homebrew project.