coin-img-ETHETH-0.20%coin-img-BTCBTC+0.78%coin-img-HYPEHYPE-1.20%coin-img-SOLSOL-0.81%coin-img-XRPXRP-0.24%coin-img-USDCUSDC-0.01%coin-img-TRXTRX+0.85%coin-img-DOGEDOGE-0.66%coin-img-ETHETH-0.20%coin-img-BTCBTC+0.78%coin-img-HYPEHYPE-1.20%coin-img-SOLSOL-0.81%coin-img-XRPXRP-0.24%coin-img-USDCUSDC-0.01%coin-img-TRXTRX+0.85%coin-img-DOGEDOGE-0.66%coin-img-ETHETH-0.20%coin-img-BTCBTC+0.78%coin-img-HYPEHYPE-1.20%coin-img-SOLSOL-0.81%coin-img-XRPXRP-0.24%coin-img-USDCUSDC-0.01%coin-img-TRXTRX+0.85%coin-img-DOGEDOGE-0.66%coin-img-ETHETH-0.20%coin-img-BTCBTC+0.78%coin-img-HYPEHYPE-1.20%coin-img-SOLSOL-0.81%coin-img-XRPXRP-0.24%coin-img-USDCUSDC-0.01%coin-img-TRXTRX+0.85%coin-img-DOGEDOGE-0.66%

Supply-chain attack hits npm, PyPI and crates.io, targeting crypto and AI developers

Huo Xing Cai Jing, citing blockchain security firm SlowMist, said MistEye has identified a supply-chain campaign that pushed malicious packages to major open-source registries including npm, PyPI and crates.io. The packages were aimed at developers working in cryptocurrency and DeFi, as well as ecosystems such as Solana and Sui/Move, and broader AI-related projects. SlowMist said the activity involved more than 34 malicious packages spanning over 384 related versions. The attackers are suspected of harvesting sensitive developer data, including crypto wallet information, SSH keys, cloud credentials, GitHub/AWS tokens, browser data and environment variables. Some payloads also attempted to establish persistence through mechanisms such as .cursorrules, CLAUDE.md, Git hooks, shell hooks, cron jobs, systemd and SSH. SlowMist advised developers to remove any impacted packages immediately, isolate potentially compromised systems, preserve logs, rotate exposed credentials, rebuild CI environments and developer machines from clean images, and review activity logs for GitHub, cloud services, SSH access and wallet operations.
Selected
SOL
SOL-0.65%
SUI
SUI-2.17%
Disclaimer: The content above is only the author's opinion and does not represent BingX’s stance. It shall not be construed as investment advice from BingX. For details, refer to the Terms and Conditions.