{"id":103789,"date":"2022-04-16T15:37:02","date_gmt":"2022-04-16T13:37:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-na-github-privedshaya-k-utechke-privatnyh-repozitoriev-i-dostupu-k-infrastrukture-npm"},"modified":"2022-04-16T15:37:02","modified_gmt":"2022-04-16T13:37:02","slug":"ataka-na-github-privedshaya-k-utechke-privatnyh-repozitoriev-i-dostupu-k-infrastrukture-npm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-na-github-privedshaya-k-utechke-privatnyh-repozitoriev-i-dostupu-k-infrastrukture-npm","title":{"rendered":"R\u00fcnnak GitHubile, mis t\u00f5i kaasa privaatsete repode lekkimise ja juurdep\u00e4\u00e4su NPM infrastruktuurile","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub hoiatab kasutajaid r\u00fcnnaku kohta, mille sihiks on andmete allalaadimine privaatsetest hoidlatest, kasutades kompromiteeritud OAuth-tokene, mis on genereeritud Heroku ja Travis-CI teenuste jaoks. Teatakse, et r\u00fcnnaku k\u00e4igus lekis teavet m\u00f5ne organisatsiooni privaatsetest hoidlatest, mis jagas ligip\u00e4\u00e4su hoidlatele PaaS-platvormile Heroku ja pideva integratsiooni s\u00fcsteemile Travis-CI. Kannatanute seas on nii GitHub kui ka NPM projekt. <\/p>\n

R\u00fcndajad suutsid privaatsetest GitHubi hoidlatest v\u00e4lja t\u00f5mmata Amazon Web Services API ligip\u00e4\u00e4suv\u00f5tme, mis oli kasutusel NPM projekti infrastruktuuris. Saadud v\u00f5ti v\u00f5imaldas p\u00e4\u00e4seda ligi NPM-pakettidele, mis asuvad AWS S3 teenuses. GitHub arvab, et vaatamata sellele, et p\u00e4\u00e4s privaatsetele NPM hoidlatele oli saadud, ei toimunud pakettide modifitseerimist ega kasutajakontode seonduvate andmete hankimist. Samuti m\u00e4rgitakse, et kuna GitHub.com ja NPM infrastruktuurid on eraldi, ei j\u00f5udnud r\u00fcndajad laadida alla GitHubi sisemiste hoidlate sisu, mis ei seotud NPM-iga, enne kui probleemsed tokenid blokeeriti. <\/p>\n

R\u00fcnnak fikseeriti 12. aprillil, p\u00e4rast seda, kui r\u00fcndajad p\u00fc\u00fcdsid kasutada AWS API v\u00f5tit. Hiljem fikseeriti sarnaseid r\u00fcnnakuid ka m\u00f5nedele teistele organisatsioonidele, kus samuti kasutati Heroku ja Travis-CI rakenduste tokene. Kannatanud organisatsioone ei nimetata, kuid k\u00f5igile r\u00fcnnakut puudutanud kasutajatele saadeti vastavad individuaalsed teavitused. Heroku ja Travis-CI rakenduste kasutajaid soovitatakse uurida turbe- ja auditi logisid, et tuvastada anomaaliaid ja ebat\u00fc\u00fcpilist tegevust. <\/p>\n

Kuidas toked r\u00fcndajate k\u00e4tte said, pole veel selge, kuid GitHub usub, et need ei ole saadud ettev\u00f5tte infrastruktuuri kompromiteerimise kaudu, kuna v\u00e4liste s\u00fcsteemide t\u00f5ttu tuleb autoriseerimise tokene GitHubi poole algsel kujul. R\u00fcndaja k\u00e4itumise anal\u00fc\u00fcs n\u00e4itas, et t\u00f5en\u00e4oliselt on privaatsete hoidlate sisu allalaadimise peamine eesm\u00e4rk anal\u00fc\u00fcsida, kas seal on konfidentsiaalset teavet, nagu ligip\u00e4\u00e4suv\u00f5tmed, mida v\u00f5iks kasutada r\u00fcnnaku j\u00e4tkamiseks teiste infrastruktuuri elementide vastu.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0435, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 OAuth, \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 Heroku \u0438 Travis-CI. \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043e\u0442\u043a\u0440\u044b\u0432\u0448\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u0434\u043b\u044f PaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Heroku \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 Travis-CI. \u0412 \u0447\u0438\u0441\u043b\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103789","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 R\u00fcnnak GitHubis, mis viis privaatsete hoidlate lekke ja NPM infrastruktuuri ligip\u00e4\u00e4suni | ProHoster","description":"GitHub on hoiatanud kasutajaid r\u00fcnnaku kohta, mille eesm\u00e4rgiks on andmete laadimine privaatsetest hoidlatest, kasutades Heroku ja Travis-CI teenustele genereeritud kompromiteeritud OAuth tokeneid.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-na-github-privedshaya-k-utechke-privatnyh-repozitoriev-i-dostupu-k-infrastrukture-npm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 GitHub, \u043f\u0440\u0438\u0432\u0435\u0434\u0448\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 NPM | ProHoster","og:description":"GitHub \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0435, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 OAuth, \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 Heroku \u0438 Travis-CI.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-na-github-privedshaya-k-utechke-privatnyh-repozitoriev-i-dostupu-k-infrastrukture-npm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-04-16T13:37:02+00:00","article:modified_time":"2022-04-16T13:37:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103789","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 10:26:30","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-04-16 13:38:06","updated":"2026-01-25 10:26:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/103789","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=103789"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/103789\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=103789"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=103789"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=103789"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}