加密货币窃取程序 TrapDoor 正攻击三大代码仓库，34 个恶意软件包被检出
ChainCatcher 消息，安全公司 Socket Security 披露，一场名为 TrapDoor 的加密货币窃取活动正在 npm、PyPI 和 Crates.io 等软件包仓库中发起主动供应链攻击。目前已发现 34 个恶意软件包和 384 个版本及构件，攻击者持续在各生态系统中推送新版本。
TrapDoor 主要针对加密货币、DeFi、AI 和安全领域的开发者，窃取钱包、SSH 密钥、云凭证、GitHub 令牌、浏览器数据、环境变量和 API 密钥。Socket 检测到恶意版本的中位检测时间为 5 分 27 秒，最快检测发生在发布后 58 秒。
Disclaimer: OKX Orbit content is provided for informational purposes only. Learn more
Replies
Related Flash News
ChainCatcher•5m agoBlackRock analyst: Under Walsh's leadership, the Fed may support rate cuts
ChainCatcher•5m agoData: Over $25 million in assets crossed from other chains to Solana in the past 7 days
Blockbeats•9m ago"Today's largest BTC position" was led by over 36.9 million orders, with the whale's stop-loss set at $73,800
Odaily•15m agoIOSG Ventures did not sell UNI and COMP; the related address was labeled with an error in Arkham
ChainCatcher•27m agoData: Bhutan transferred $237 million worth of BTC to Segwit addresses this year, and currently still holds $233 million worth of BTC
Blockbeats•57m agoOn-chain Pre-IPO Leads Traditional Markets: If Launched, Go Long on SpaceX, OpenAI, Anthropic Could Profit Nearly 300%
Blockbeats•1h agoSlow Fog: Supply chain attacks affected PyPI/npm/crates.io, with over 34 malicious packages targeting crypto and AI developers
币界网•1h agoFalconX: Hyperliquid is rising as a competitor to traditional exchanges
ChainCatcher•1h agoWLFI unlock activation portal opened for two weeks, with 45.9 billion tokens transferred into the unlocking contract valued at $2.81 billion
Blockbeats•1h agoGrayscale CEO: "BTC OG Insider Whale" ZEC short liquidation price is a reasonable near-term price target