Hacker Newsnew | past | comments | ask | show | jobs | submit | dev_confused's commentslogin

Legend... thanks for looking into this, I am now less paranoid :)


I recently made an app with Tauri and all of a sudden (same app last week did not have this), I am getting strange console log messages:

BuyNow driver Initialized!!!!! & MsnDriver Starts

The source code of the file thats creating these console logs is posted in the github link.

To my non experienced eyes, it seems like some sort of (malicious?) injection. Spawning from debugger:///VM11 that is no where in my code

Others are seeing the same thing.

Any Ideas/Help/Guidance?


I absolutely have no idea what I'm talking about. But this line jumped out at me:

  window.BuyNowRuntime.postMessageToHost('StartBuyNow')
So you're trying to do things with BuyNow, and so a BuyNow thing is starting. So, are you just getting further than you were last week?

Alternately, did BuyNow change how their stuff worked since last week?


That's the thing, I have no idea what BuyNow is. I searched all throughout my code and it does not exist. On the github you can see other developers, with completely different projects seeing the same exact logs, as if something has been injected.

My code from today was the exact same as it was last week. So it seems like some package or dependency has been compromised perhaps?

Edit: And when I tried to search for it, I could not find a single post anywhere on the web about it.


There was a "Buy Now Pay Later" feature thing that Edge was pushing at the tail end of 2021 that was available in developer channels which might be related


Ah, I see. So you did not write the file you posted.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: