Top Architect

Jan 21, 2025 · Information Security

Bilibili Employee Injected Malicious Code into Web Frontend, Triggering Account Ban Messages

A former Bilibili engineer inserted malicious JavaScript into the platform's web frontend, causing some users to see a fake account‑ban notice, which exposed internal code‑review weaknesses and sparked widespread discussion about insider threats and web security.