Twilio today disclosed that its TaskRouter JS SDK was compromised by attackers after they gained access to one of its misconfigured Amazon AWS S3 buckets which left the SDK’s path publicly readable and writable for roughly five years, since 2015. […]
Click here for original story, Twilio exposes SDK, attackers inject it with malvertising code
Source: Bleeping Computer