Security Advisory: Another well-known developer's NPM account has been compromised, injecting wallet-stealing malware
BlockBeats News, September 9th. According to Socket monitoring, the ongoing NPM supply chain attack has spread from the well-known developer Qix to another highly prominent maintainer. The NPM account duckdb_admin, responsible for the DuckDB-related package, has been compromised, and multiple malicious versions have been published. The injected code is the same wallet-stealing malware used when Qix's account was compromised, strongly indicating that both are part of the same attack campaign.
Previously reported, Ledger's CTO stated that in the event of a large-scale supply chain attack, the entire JavaScript ecosystem could be at risk. However, the NPM attackers were not successful, and there were almost no victims.
También te puede interesar
Ganadores
Últimas noticias sobre criptomonedas
Trump: The full benefits of tariffs have not yet been fully realized, and the amount to be paid will reach a historic high
A certain whale briefly opened a 3x leveraged BTC short position, reaching a position size of $87.58 million.
Analysis: When the Volatility Index (VIX) exceeds 28.7, the S&P 500 tends to deliver strong returns
SOON has reopened the claim functionality for SOONer and SOONest NFT tokens
BSC On-Chain Transaction Volume Weakens, Most Popular Memes See Trading Volume Below $1 Million
Atención al cliente:@weikecs
Cooperación empresarial:@weikecs
Trading cuantitativo y MM:[email protected]
Programa VIP:[email protected]