PANews 3月3日消息，GoPlus中文社区在X平台发布预警称，朝鲜黑客向npm注册表发布了一组26个恶意软件包，这些恶意软件包都附带一个安装脚本（“install.js”），该脚本会在软件包安装过程中自动执行，进而运行位于“vendor/scrypt-js/version.js”中的恶意代码，恶意代码会通过同一恶意URL下载并执行远程访问木马（RAT），实施键盘记录剪贴板窃取浏览器凭据收集TruffleHog秘密扫描Git仓库和SSH密钥窃取等恶意行为。此次事件与一个名为“Famous Chollima”的朝鲜黑客活动相关。
请用户和开发者在安装软件包时注意检查来源和安全性，避免如下26个恶意软件，以免造成隐私泄露或资产损失：
argonist@0.41.0
bcryptance@6.5.2
bee-quarl@2.1.2
bubble-core@6.26.2
corstoken@2.14.7
daytonjs@1.11.20
ether-lint@5.9.4
expressjs-lint@5.3.2
fastify-lint@5.8.0
formmiderable@3.5.7
hapi-lint@19.1.2
iosysredis@5.13.2
jslint-config@10.22.2
jsnwebapptoken@8.40.2
kafkajs-lint@2.21.3
loadash-lint@4.17.24
mqttoken@5.40.2
prism-lint@7.4.2
promanage@6.0.21
sequelization@6.40.2
typoriem@0.4.17
undicy-lint@7.23.1
uuindex@13.1.0
vitetest-lint@4.1.21
windowston@3.19.2
zoddle@4.4.2
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Articoli correlati
Privacy Protocol Umbra Shuts Down Frontend to Block Attackers from Laundering Stolen Kelp Funds
Gate News message, April 22 — Privacy protocol Umbra has shut down its frontend website to prevent attackers from using the protocol to transfer stolen funds following recent attacks, including the Kelp protocol breach that resulted in losses exceeding $280 million. Approximately $800,000 in stolen
GateNews43m fa
慢霧 23pds 警示：Lazarus Group 發布針對加密貨幣的新型 macOS 工具包
慢霧首席資訊安全長 23pds 於 4 月 22 日發布警示，稱北韓駭客組織 Lazarus Group 已發布全新原生 macOS 惡意軟體工具包「Mach-O Man」，專門針對加密貨幣行業及高價值企業高管。
MarketWhisper1h fa
Justin Sun Sues World Liberty Financial Over Frozen WLFI Tokens and Governance Rights
Gate News message, April 22 — Justin Sun has filed a lawsuit in California federal court against World Liberty Financial (WLF), a DeFi project backed by Eric Trump and Donald Trump Jr., alleging that the team froze all his WLFI holdings, removed his voting rights, and threatened to permanently burn
GateNews3h fa
Venus Protocol 攻擊者轉移 2301 枚 ETH，流入 Tornado Cash 清洗
根據鏈上分析師 Ai 阿姨於 4 月 22 日的監測，Venus Protocol 攻擊者在 11 小時前向地址 0xa21…23A7f 轉移 2,301 枚 ETH（約 532 萬美元），隨後將資金分批轉入加密混合器 Tornado Cash 進行清洗；截至監測時，攻擊者鏈上仍持有約 1,745 萬美元的 ETH。
MarketWhisper4h fa
CometBFT 零日漏洞曝光，80 億美元 Cosmos 網路節點面臨死鎖風險
安全研究員 Doyeon Park 於 4 月 21 日公開揭露 Cosmos 共識層 CometBFT 中存在一個 CVSS 7.1 級高危零日漏洞，可能導致節點在區塊同步（BlockSync）階段遭惡意對等節點攻擊而陷入死鎖，影響保障超 80 億美元資產的網路。
MarketWhisper4h fa
North Korean Lazarus Group Releases New Mach-O Man macOS Malware Targeting Crypto
Summary: Lazarus Group released a native macOS malware toolkit named Mach-O Man, aimed at crypto platforms and high-value executives; SlowMist warns users to exercise caution against attacks.
Abstract: The article reports that the Lazarus Group has unveiled Mach-O Man, a macOS-native malware toolkit aimed at cryptocurrency platforms and high-value executives. SlowMist warns users to exercise caution to mitigate potential attacks.
GateNews4h fa
