Comment on Umami is compromised - upgrade immediately

• EncryptKeeper@lemmy.world ⁨1⁩ ⁨month⁩ ago

  Yeah but Umami is an analytics engine power by client side tracking. If it was behind a VPN it would be useless.

  source
• GottaHaveFaith@fedia.io ⁨1⁩ ⁨month⁩ ago

  Yes I re-read the cve, I thought it was an issue with an npm package with a cryptominer

  source
• frongt@lemmy.zip ⁨1⁩ ⁨month⁩ ago

  Unless it was the software package itself that was compromised.

  source

  • EncryptKeeper@lemmy.world ⁨1⁩ ⁨month⁩ ago

    It was not

    source