Kurwiswa paGitHub Zviito zvekuchera cryptocurrency paGitHub maseva

GitHub iri kuferefeta nhevedzano yekurwiswa umo varwisi vakakwanisa kuchera cryptocurrency paGitHub gore rezvivakwa vachishandisa GitHub Zviito nzira yekumhanyisa kodhi yavo. Kuedza kwekutanga kushandisa GitHub Zviito zvemigodhi zvakatanga muna Mbudzi gore rapfuura.

GitHub Zviito zvinobvumira vanogadzira kodhi kuti vabatanidze vanobata otomatiki akasiyana siyana muGitHub. Semuenzaniso, uchishandisa GitHub Zviito unogona kuita mamwe macheki uye bvunzo paunenge uchiita, kana otomatiki kugadzirisa kweZvitsva zvitsva. Kuti vatange kuchera migodhi, vanorwisa vanogadzira forogo yenzvimbo inoshandisa GitHub Actions, wedzera GitHub Actions kukopi yavo, uye tumira chikumbiro chekudhonza kune yepakutanga repository vachifunga kutsiva iripo GitHub Actions vanobata neitsva “.github/workflows /ci.yml” mugadziri.

Chikumbiro chakashata chekudhonza chinoburitsa kuyedza kwakawanda kumhanyisa anorwisa-akatsanangurwa GitHub Zviito mubato, iyo mushure memaawa makumi manomwe neshanu inovhiringwa nekuda kwekufamba kwenguva, inotadza, uye yobva yamhanya zvakare. Kuti varwise, munhu anorwisa anongoda kugadzira chikumbiro chekudhonza - mubati anomhanya otomatiki pasina kuvimbiswa kana kutora chikamu kubva kune vekutanga repository vanochengetedza, vanogona kungotsiva chiitiko chekufungidzira uye kumira kutomhanya GitHub Zviito.

Muchibatiso che ci.yml chawedzerwa nevanorwisa, “run” parameter ine kodhi yakavanzika (eval “$(echo 'YXB0IHVwZGF0ZSAt…' | base64 -d”), iyo, kana yaurayiwa, inoedza kudhawunirodha nekumhanyisa chirongwa chemugodhi. Mumisiyano yekutanga yekurwiswa kubva kunzvimbo dzakasiyana-siyana Chirongwa chinodaidzwa kuti npm.exe chakakwidzwa kuGitHub neGitLab chikaiswa mufaira reELF reAlpine Linux (rinoshandiswa muDocker mifananidzo.) Nzira itsva dzekurwisa dhawunirodha kodhi yegeneric XMRig. miner kubva kune yepamutemo purojekiti repository, iyo inozovakwa nekero inotsiva wallet uye maseva ekutumira data.

Source: opennet.ru

Voeg