Blog

2 articles

• 5 min de lecture

  Sécurité9 septembre 2026Uniquement en English

  Two and a half months with an intruder in our repositories

  On 6 September 2026, an antivirus quarantined a 32 KB “font file” in one of our projects. That file was a trojan, and it had been rewriting our commits since June.

  • #security
  • #github
  • #polinrider

  Lire
• 8 min de lecture

  Sécurité9 septembre 2026Uniquement en English

  Anatomy of PolinRider: the trojan that rewrites your commits

  How a JavaScript loader disguised as a font file runs from VS Code or your build, steals credentials and spreads by rewriting commits with your own key — and what to change.

  • #security
  • #malware
  • #vscode

  Lire