Security Advisory: Another well-known developer's NPM account has been compromised, injecting wallet-stealing malware
BlockBeats News, September 9th. According to Socket monitoring, the ongoing NPM supply chain attack has spread from the well-known developer Qix to another highly prominent maintainer. The NPM account duckdb_admin, responsible for the DuckDB-related package, has been compromised, and multiple malicious versions have been published. The injected code is the same wallet-stealing malware used when Qix's account was compromised, strongly indicating that both are part of the same attack campaign.
Previously reported, Ledger's CTO stated that in the event of a large-scale supply chain attack, the entire JavaScript ecosystem could be at risk. However, the NPM attackers were not successful, and there were almost no victims.
Вам также может понравиться
Растущие активы
Последние новости криптовалют
WEEX объявляет о поддержке сети Monad mainnet
Обзор активности китов по цепочке: "BTC OG Insider Whale" Long 15 000 ETH, "Buddy" Еще раз Long $13,35M Worth of ETH
Второй выпуск предварительного отчета о масштабном мероприятии голосования "MEET48Best7", MEET48 event dApp поднялся на первое место в рейтинге Social Track UAW
The Japan Financial Services Agency is considering requiring cryptocurrency exchanges to establish a security reserve fund to address the risk of hacking or security vulnerabilities.
Кит потратил 8 000 000 USDC на покупку 2700 ETH
Служба поддержки:@weikecs
Деловое сотрудничество:@weikecs
Количественная торговля и ММ:[email protected]
VIP-программа:[email protected]