加密货币窃取程序 TrapDoor 正攻击三大代码仓库，34 个恶意软件包被检出
ChainCatcher 消息，安全公司 Socket Security 披露，一场名为 TrapDoor 的加密货币窃取活动正在 npm、PyPI 和 Crates.io 等软件包仓库中发起主动供应链攻击。目前已发现 34 个恶意软件包和 384 个版本及构件，攻击者持续在各生态系统中推送新版本。
TrapDoor 主要针对加密货币、DeFi、AI 和安全领域的开发者，窃取钱包、SSH 密钥、云凭证、GitHub 令牌、浏览器数据、环境变量和 API 密钥。Socket 检测到恶意版本的中位检测时间为 5 分 27 秒，最快检测发生在发布后 58 秒。
Disclaimer: OKX Orbit content is provided for informational purposes only. Learn more
Replies
Related Flash News
Blockbeats•26m agoUnitree Technology's STAR Market IPO will be held on June 1
Blockbeats•33m agoBitcoin ETFs have seen over $2 billion in outflows in two weeks, but analysts say "institutional funds have not left."
Blockbeats•36m agoPrometheum Bets on Wall Street Channels: What Tokenized Securities Truly Lacks Is Not Technology, But 'Distribution'
Blockbeats•47m agoThe Kingdom of Bhutan has cumulatively sold 9,180 BTC, at an average price of $98,067
ChainCatcher•55m agoBlockaid: SquidRouterModule suspected of being attacked, 86 Gnosis Safe wallets were stolen for approximately $3 million within about 2 hours
Odaily•1h agoQatari media: The Strait of Hormuz will be opened in phases
币界网•1h agoBlackstone sold $1 billion in Bitcoin, and its ETF underperformed
Blockbeats•1h agoBitcoin may stage an "$80,000 short squeeze," analysts warn that a larger liquidation storm is approaching
ChainCatcher•1h agoBinance will remove some leveraged trading pairs
ChainCatcher•1h agoPeckShield：WUSD/GLOVE 遭攻击损失约 20.7 万美元