Skip to content

Config file injection

Named by 2 kept items in this workspace.

Search every workspace for Config file injection. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • The OpenSourceMalware Show #13
    talk2026-07-16

    PolinRider's dominant delivery vector (94% of cases): malicious JavaScript appended to existing config files, or a new file created and payload appended, e.g. Vite config files

  • PolinRider Confirmed Footprint Grows 6.5x Since March
    writeup2026-07-15It is written here as Config-file injection.

    Dropping an obfuscated JS loader into a build config file (postcss.config.mjs, tailwind.config.js, eslint.config.mjs, next.config.mjs) that runs automatically when a project is installed or opened; primary vector, 93.9%/2,270 of July round repos

All techniques in this workspace.