Supply chain attacks affect PyPI/npm/crates.io, with over 34 malicious packages targeting cryptocurrency and AI developers
Prefer us on Google
According to Slow Fog's disclosure, the security agency MistEye detected a cross-registry supply chain attack incident, where attackers targeted developers in the fields of cryptocurrency, DeFi, Solana, Sui/Move, and AI by publishing malicious packages on npm, PyPI, and crates.io. This attack activity includes more than 34 malicious packages and over 384 related versions. The attackers may steal cryptocurrency wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, environment variables, and developers' confidential information.
Some of the malicious payloads also attempted to achieve persistence through .cursorrules, CLAUDE.md, Git hooks, shell hooks, cron, systemd, and SSH. Developers are advised to immediately remove the affected packages, isolate the affected systems, retain logs, rotate exposed credentials, rebuild CI environments and developer machines from clean images, and review GitHub, cloud services, SSH, and wallet activity logs.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
Canaan reports Ethiopia mining paused at 4.96 EH/s in July
GnoLand Unveils AI Tool and Security System 'GnoMCP'
Japan's Core Machinery Orders Increase by 9.7% in June
Scaramucci Claims Bitcoin Bear Market Decline of About 55% is Below Historical Levels
Operations Halted at Two Grain Terminals in Novorossiysk
Bhutan Government-Linked Wallet Moves 300 Bitcoins
OpenAI's GPT-6 Model Astra Likely to Release by September 30
Google Acquires Spirit Airlines Data for $10 Million
Taiwan Offers 300 Euros to Every Citizen
DMND Integrates Mempool Accelerator for Miner Revenue Sharing
U.S. Crude Oil Inventories Fall to 712 Million Barrels, Lowest Level Since 1984
Attacks on Wildberries Warehouses Reduced Pickup Point Revenue by 30-40%
U.S. State Department Advises Citizens in the Middle East to Prepare for Evacuation
NVIDIA Releases Video Codec SDK 13.1 with New Features
DK's Probability of Defeating HLE Reported at 34%
Securitize Subsidiary Completes SEC Investment Advisor Registration, Expanding Tokenization Infrastructure
Yushu Technology Founder Wang Xingxing Featured on Time Cover, Predicts Humanoid Robots Will Achieve Large-Scale Commercial Use in 2 to 10 Years
The Smarter Web Company Repays Smarter Convertible Notes Early, Disposes of 178 Bitcoins
Coinbase Bitcoin Premium Hits Record 50 Days of Discount
BitRing Rebrands to BRT.Fit
SK Hynix ADR Options Trading Focused on Short-Term Contracts
DeepSeek Prepares for IPO, Expected to Submit Listing Application by Year-End
Polymarket Achieves Record Revenue of Over $11 Million This Week
Cleanspark Increases Holdings by 454 BTC, Total Holdings Reach 13,924 BTC
Government Simplifies Rules for Wood Processors, Additional 1.5 Million Cubic Meters of Timber
Qatar Political Delegation Visits Iran, Seeks Explanation for Strait of Hormuz Allegations
Whale Becomes Largest SKHX Bull on Hyperliquid with $27.75 Million Position
Musk Announces SpaceXAI Will Release Grok 4.5 Tomorrow
Ansem-2 Wallet Address Spends $233,000 to Acquire 2.79 Million CASHCAT in 3 Hours
Bitcoin Rebound Has Started, Confirmation Signal Needed to Break $66,000
Canaan reports Ethiopia mining paused at 4.96 EH/s in July
GnoLand Unveils AI Tool and Security System 'GnoMCP'
Japan's Core Machinery Orders Increase by 9.7% in June
Scaramucci Claims Bitcoin Bear Market Decline of About 55% is Below Historical Levels
Operations Halted at Two Grain Terminals in Novorossiysk
Bhutan Government-Linked Wallet Moves 300 Bitcoins
Contents
Latest articles
Latest coin listings on WEEX
