All umami instances have been infected with a persisting crypto miner. Umami was affected by the next.js CVE but quietly released a fix, so most of their users missed it

  • Encrypt-Keeper@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    ·
    edit-2
    1 day ago

    Yeah but Umami is an analytics engine powered by client side tracking. If it was behind a VPN it would be useless.