Lottiefiles Lottieplayer JavaScript library has been compromised forum.lottiefiles.com/t/the-pr…
Somebody also made the first change to the GitHub repo for months 10 minutes ago, reasons unclear.
You may want to proxy block *.web3modal.org
The problem of someone else's popup appearing
Hello, when I connect this link https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js via cdn ( when i add this link to my website), the following popup begins to appear on the site.Let's talk Lottie
This entry was edited (3 weeks ago)
Kevin Beaumont
in reply to Kevin Beaumont • • •Lottie-Player saga playing out here: github.com/LottieFiles/lottie-…
3 new versions were published today but the threat actor infected them. Appears to be a stolen token.
#threatintel
Malicious code in Lottie-Player CDN files · Issue #254 · LottieFiles/lottie-player
GitHubKevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •