Security Firm Cryptocurrency Theft Tool TrapDoor Targets Top Three Code Repositories, 34 Malicious Packages Detected

BlockBeats News, May 25th, according to the security company Socket Security, a cryptocurrency theft activity named TrapDoor is conducting a supply chain attack in package repositories such as npm, PyPI, and Crates.io. Currently, 34 malicious packages and 384 versions and builds have been identified, with the attackers continuously pushing new versions across the ecosystems.

The article states that TrapDoor mainly targets developers in the cryptocurrency, AI, and security fields, capable of stealing wallets, SSH keys, cloud credentials, GitHub tokens, browser data, environment variables, and API keys.

ソース：BlockBeats

免責事項：現在のコンテンツは第三者の視点に基づくもの、または第三者の視点からAIが直接翻訳したものです。CoinExはコンテンツの信頼性、正確性、独創性を保証するものではなく、CoinExからの投資アドバイスを構成するものではありません。暗号資産の価格変動は急激に変動します。潜在的なリスクにご注意ください。