Security Advisory: Another well-known developer's NPM account has been compromised, injecting wallet-stealing malware
BlockBeats News, September 9th. According to Socket monitoring, the ongoing NPM supply chain attack has spread from the well-known developer Qix to another highly prominent maintainer. The NPM account duckdb_admin, responsible for the DuckDB-related package, has been compromised, and multiple malicious versions have been published. The injected code is the same wallet-stealing malware used when Qix's account was compromised, strongly indicating that both are part of the same attack campaign.
Previously reported, Ledger's CTO stated that in the event of a large-scale supply chain attack, the entire JavaScript ecosystem could be at risk. However, the NPM attackers were not successful, and there were almost no victims.
Também poderá gostar de
Em alta
Últimas Crypto News
Análise: Cuidado com a longa linha de defesa de 82.000 dólares. Se violar, os criadores de mercado venderão spot a hedge, levando a uma pressão de baixa acelerada.
Mainstream Perp DEX Protocol Revenue Surge: Leads hiperlíquidos com US$ 4,24 milhões em receita 24 horas
<span>O Nasdaq caiu 0,2% intraday, enquanto as ações <i> relacionadas à criptomoeda</i> em todo o painel foram atingidas duramente.</span>
Goldman Sachs Parceiro: Sinais de fadiga do mercado de touros no mercado de ações dos EUA
Citigroup: AI Optimism Wanes, mantém cuidado com a posição longa do S&P 500
Apoio ao cliente:@weikecs
Cooperação empresarial:@weikecs
Trading quant. e criação de mercados:[email protected]
Serviços VIP:[email protected]