coin-img-ETHETH-0.08%coin-img-BTCBTC+0.89%coin-img-HYPEHYPE+0.66%coin-img-SOLSOL-0.37%coin-img-XRPXRP-0.35%coin-img-USDCUSDC-0.02%coin-img-DOGEDOGE-0.44%coin-img-TRXTRX+0.74%coin-img-ETHETH-0.08%coin-img-BTCBTC+0.89%coin-img-HYPEHYPE+0.66%coin-img-SOLSOL-0.37%coin-img-XRPXRP-0.35%coin-img-USDCUSDC-0.02%coin-img-DOGEDOGE-0.44%coin-img-TRXTRX+0.74%coin-img-ETHETH-0.08%coin-img-BTCBTC+0.89%coin-img-HYPEHYPE+0.66%coin-img-SOLSOL-0.37%coin-img-XRPXRP-0.35%coin-img-USDCUSDC-0.02%coin-img-DOGEDOGE-0.44%coin-img-TRXTRX+0.74%coin-img-ETHETH-0.08%coin-img-BTCBTC+0.89%coin-img-HYPEHYPE+0.66%coin-img-SOLSOL-0.37%coin-img-XRPXRP-0.35%coin-img-USDCUSDC-0.02%coin-img-DOGEDOGE-0.44%coin-img-TRXTRX+0.74%

SlowMist Flags Cross-Registry Supply-Chain Attack Aimed at Crypto Developers

Odaily Planet Daily reports that SlowMist's monitoring unit MistEye has identified a cross-registry supply-chain campaign targeting developers, with attackers distributing malicious packages across npm, PyPI and Crates.io. The operation spans more than 34 malicious packages and over 384 related versions, focusing on cryptocurrency, DeFi, Solana, Sui/Move and AI developer communities. SlowMist said suspected objectives include theft of crypto wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, environment variables and developer keys. Some payloads also attempt to establish persistence using cursorrules, CLAUDE.md, Git hooks, shell hooks, cron, systemd and SSH. SlowMist advised users to remove affected packages immediately, isolate potentially compromised machines, preserve logs, rotate any exposed credentials, rebuild CI runners and developer devices from clean images, and review activity across GitHub, cloud services, SSH and wallet accounts.
Selected
SOL
SOL-0.37%
SUI
SUI-1.81%
Disclaimer: The content above is only the author's opinion and does not represent BingX’s stance. It shall not be construed as investment advice from BingX. For details, refer to the Terms and Conditions.