最新报道:Hackers are now using large language models (LLMs) to conduct advanced cyberattacks, exploiting trusted AI tools to extract sensitive data. In a recent breach, attackers compromised the npm account of the widely used Nx package, inserting malware that leveraged AI assistants like Gemini CLI or Claude Code CLI to search for and steal cryptocurrency wallet passwords and API keys. The stolen data was encoded in base64 and uploaded to GitHub, evading traditional security measures. This incident highlights growing risks as AI-driven attacks become more deceptive and harder to detect, urging stronger safeguards in open-source ecosystems.