ls ~/threat-research
MainWP is a popular plugin for centrally managing multiple WordPress sites. It is composed of two separate plugins that are meant to be connected to each other: MainWP Dashboard and MainWP Child . This post details a critical authentication vulnerability found in MainWP Child, a plugin installed on over 700,000
On September 8th 2021 I discovered a backdoor in a Composer package for generating QR codes in the Laravel framework. The package laraveli/qr-code contains malware that attackers can use to remotely execute code on a compromised website or install and access a web shell. The code was traced
On September 8th 2021, as part of greenfield research project, I discovered a malicious package in Packagist , the main Composer repository. The symfont/process package contains malware and uses a technique called "package typosquatting" to target users of the popular symfony/process package which has been downloaded over
