Dear all,
This week's release of Unity Hub 3.1.0 included an update to a compromised version of the node-ipc library, an open source package that is used by the Hub. This resulted in the generation of an empty .txt file on the desktop of users who upgraded to Hub 3.1.0. Our initial investigation did not reveal any further additions of unwanted code or other unexpected behavior. While there do appear...
Hub 3.1.0 node-ipc incident
This week's release of Unity Hub 3.1.0 included an update to a compromised version of the node-ipc library, an open source package that is used by the Hub. This resulted in the generation of an empty .txt file on the desktop of users who upgraded to Hub 3.1.0. Our initial investigation did not reveal any further additions of unwanted code or other unexpected behavior. While there do appear...
Hub 3.1.0 node-ipc incident