Odaily星球日报讯 据 SlowMist 监测，MistEye 检测到一起针对开发者的跨注册表供应链攻击，攻击者通过 npm、PyPI 和 Crates.io 发布恶意包实施攻击。该攻击活动涉及 34 个以上恶意包及 384 个以上相关版本，目标社区包括加密、DeFi、Solana、Sui/Move 及 AI 开发者。
攻击者潜在行为包括窃取加密钱包、SSH 密钥、云凭证、GitHub/AWS 令牌、浏览器数据、环境变量及开发者密钥。部分载荷还试图通过 cursorrules、CLAUDE.md、Git 钩子、Shell 钩子、cron、systemd 及 SSH 实现持久化。
SlowMist 建议立即移除受影响包，隔离受影响系统，保留日志，轮换暴露凭证，从干净镜像重建 CI 运行器及开发者机器，并审查 GitHub、云、SSH 及钱包活动。

Odaily星球日报讯 据 SlowMist 监测，MistEye 检测到一起针对开发者的跨注册表供应链攻击，攻击者通过 npm、PyPI 和 Crates.io 发布恶意包实施攻击。该攻击活动涉及 34 个以上恶意包及 384 个以上相关版本，目标社区包括加密、DeFi、Solana、Sui/Move 及 AI 开发者。攻击者潜在行为包括窃取加密钱包、SSH 密钥、云凭证、GitHub/AWS 令牌、浏览器数据、环境变量及开发者密钥。部分载荷还试图通过 cursorrules、CLAUDE.md、Git 钩子、Shell 钩子、cron、systemd 及 SSH 实现持久化。SlowMist 建议立即移除受影响包，隔离受影响系统，保留日志，轮换暴露凭证，从干净镜像重建 CI 运行器及开发者机器，并审查 GitHub、云、SSH 及钱包活动。

慢雾：监测到针对加密开发者的跨平台供应链攻击，涉及34个以上恶意包

According to Odaily monitoring, MistEye detected a cross-registry supply chain attack targeting developers. Attackers distributed malicious packages via npm, PyPI, and [unclear - likely a typo, should be '_2024111120230_|] to carry out the attack. This campaign involved over 34 malicious packages and over 384 related versions, targeting communities including crypto, DeFi, Solana, Sui/Move, and AI developers.
Potential attacker behaviors include stealing encrypted wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, environment variables, and developer keys. Some payloads also attempt to achieve persistence via cursorrules, Git hooks, shell hooks, cron, systemd, and SSH.
SlowMist recommends immediately removing affected packages, isolating affected systems, preserving logs, rotating exposure credentials, rebuilding the CI runner and developer machines from clean images, and reviewing GitHub, cloud, SSH, and wallet activity.

According to SlowMist, MistEye detected a cross-registry supply chain attack targeting developers. Attackers distributed malicious packages via npm, PyPI, and Crates.io. The campaign involved over 34 malicious packages and over 384 related versions, targeting communities including crypto, DeFi, Odaily, Sui/Move, and AI developers. Potential attacker actions include stealing encrypted wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, environment variables, and developer keys. Some payloads also attempt to achieve persistence via cursorrules, CLAUDE.md, Git hooks, shell hooks, cron, systemd, and SSH. SlowMist recommends immediately removing affected packages, isolating affected systems, preserving logs, rotating exposure credentials, rebuilding the CI runner and developer machines from clean images, and reviewing GitHub, cloud, SSH, and wallet activity.

SlowMist: Detected a cross-platform supply chain attack targeting crypto developers, involving more than 34 malicious packets.

Author: Xiaobing, TechFlow TechFlow
On May 22, after the China Securities Regulatory Commission (CSRC) announced its intention to impose severe penalties on three overseas brokerage firms—Futu, Tiger Brokers, and Longbridge—their stock prices plummeted.
However, in Futu's own app community, the style suddenly changed. It was no longer just about exchanging stock information; overnight, it became a dating platform for stock investors.
[image]
[image]
[image]
A mainland Chinese woman with a D-cup bust who claims to be beautiful is seeking a foreign man; a mainland Chinese born in the 1990s with a 2046% return on investment is willing to accept a "gender-neutral" identity change; a Hong Kong man holding a German passport...

When Futu becomes a matchmaking corner, overseas status becomes a form of hard currency for the middle class.

The Ministry of Finance is seeking feedback on a draft amendment to the Law on Supporting Small and Medium-Sized Enterprises, with many notable proposals, most notably the direction to allow businesses to use digital assets to access...

Proposal to allow small and medium-sized enterprises to borrow capital using digital assets.

Changpeng Zhao (CZ) has denied false rumors circulating on Sunday that he went missing due to a surfing accident in Dubai. The fabricated story originated in Chinese-language WeChat groups.

Reaction...