Ask HN: What was the 3rd party library that was used to hack HipChat?

3 pointsjoshdance2 comments

https://blog.hipchat.com/2017/04/24/hipchat-security-notice/

They don't disclose what library it was. They may be waiting until that library can be patched etc.

Anyone have ideas on what it was?

I contacted their support and got this response:

Question 4. Can you provide the third-party library or the suspicious IP addresses for us to check our systems?

Answer 4. - Our investigation is in progress and we are not providing those details at this time.

It might be: