North Korean Hackers Upload 300 Malicious Code Packages Targeting Blockchain Firms
-
最新报道：U.S. cybersecurity firm Socket reports that North Korean state-sponsored hackers uploaded over 300 malicious packages to the npm registry, disguised as harmless code libraries like express and hardhat. These packages, downloaded roughly 50,000 times, installed malware stealing passwords, browser data, and cryptocurrency wallet keys. The campaign, dubbed "Contagious Interview," targeted blockchain and Web3 developers via fake LinkedIn recruiter profiles, using techniques consistent with known North Korean malware families. GitHub has removed some packages, but researchers warn such supply-chain attacks exploit npm's openness, urging developers to scan dependencies and use vetting tools.
下一篇
Traders are starting to bet on at least one major Fed rate cut before the end of the year.
- According to Bijie.com, on October 16th, traders began betting on at least one significant...
24小时热点
热点专题
412481