Security Advisory: Another well-known developer's NPM account has been compromised, injecting wallet-stealing malware
BlockBeats News, September 9th. According to Socket monitoring, the ongoing NPM supply chain attack has spread from the well-known developer Qix to another highly prominent maintainer. The NPM account duckdb_admin, responsible for the DuckDB-related package, has been compromised, and multiple malicious versions have been published. The injected code is the same wallet-stealing malware used when Qix's account was compromised, strongly indicating that both are part of the same attack campaign.
Previously reported, Ledger's CTO stated that in the event of a large-scale supply chain attack, the entire JavaScript ecosystem could be at risk. However, the NPM attackers were not successful, and there were almost no victims.
Você também pode gostar
Ganhadores
Últimas notícias sobre cripto
Uma baleia depositou 4 milhões USDC em Hyperliquid e cortou o HYPE 10x.
Monad Ecosystem Meme Coin CHOG Market Cap Surges Over $10 Million Briefly
Tom Lee: BTC provavelmente alcançará US $ 100,000 este ano, "talvez" atinja um novo alto
Arthur Hayes continua a acumular ENA, PENDLE, ETHFI
Avail está lançando a rede principal do Nexus para construir uma camada unificada de execução de liquidez multi-cadeia.
Atendimento ao cliente:@weikecs
Parcerias comerciais:@weikecs
Quant trading e MM:[email protected]
Serviços VIP:[email protected]