That Github repo was open to the public since 17 Jun 2018 
pic.twitter.com/SHUWaPXIeK
Show this thread
Was reading about a sophisticated attack on FireEye leveraging Solarwinds. Hmmm how that would happened?
. Then realized their password was *****123 
#FireEye #SolarWindspic.twitter.com/foGzEOdytG
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Ahhhh Update link
-
:P lmao
End of conversation
New conversation -
-
-
What did they response you?
-
- Show replies
New conversation -
-
-
The malicious binaries involved were signed. But yeah, what you shared is also pretty bad from SolarWinds.
-
And they still had the malicious binaries on the download portal until todayhttps://twitter.com/KyleHanslovan/status/1338360093767823362?s=20 …
The full compromised package is still being hosted online as well
hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2019.4/2019.4.5220.20574/SolarWinds-Core-v2019.4.5220-Hotfix5.msp pic.twitter.com/E1lWZKvk05Show this thread - Show replies
New conversation -
-
-
Nice find, wow.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
The email has a date from 2019
-
Yeah good eye.. didn’t catch that at first lol...
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.