Supply chain attacks affect PyPI/npm/crates.io, with over 34 malicious packages targeting cryptocurrency and AI developers
According to Slow Fog's disclosure, the security agency MistEye detected a cross-registry supply chain attack incident, where attackers targeted developers in the fields of cryptocurrency, DeFi, Solana, Sui/Move, and AI by publishing malicious packages on npm, PyPI, and crates.io. This attack activity includes more than 34 malicious packages and over 384 related versions. The attackers may steal cryptocurrency wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, environment variables, and developers' confidential information.
Some of the malicious payloads also attempted to achieve persistence through .cursorrules, CLAUDE.md, Git hooks, shell hooks, cron, systemd, and SSH. Developers are advised to immediately remove the affected packages, isolate the affected systems, retain logs, rotate exposed credentials, rebuild CI environments and developer machines from clean images, and review GitHub, cloud services, SSH, and wallet activity logs.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

BitFuFu's Bitcoin Production Reaches 174 BTC in August, Up 55.4%

Trezor Hardware Wallet Supports Clear Signing Feature

Iran Claims to Have Seized Advanced U.S. Unmanned Submarine, U.S. Has Not Confirmed

Sality botnet disruption leaves address-swapping malware active

BYD Plans to Export Over 2.5 Million Electric Vehicles by 2027

Amazon Plans to Issue Its First Pound Bond for Fundraising

Scholarships up to 4660 UAH per month exempt from taxes starting in 2026

Curve Finance implements soft liquidation model

SpaceX Set to Benefit from Nasdaq 100 Index Weight Adjustment

Drone Attacks 'We Are Ukraine' Channel Building, Five Injured

Circle Acquires Singapore's Tazapay Cross-Border Payment Platform

Six Companies Passed Defense Ministry Tests for Purchasing Drones with Machine Vision

Bithumb Holdings Appoints New CEO Kim Ki-beom

Motorcycle Sales in Ukraine Decreased by 15.5% in August 2026

Latvia to Impose 300% Tariff on Grain from Russia and Belarus

US Court Seizes Some Virtual Assets Linked to North Korean IT Workers

Xpeng's Robot Production Line Launched, First Advanced Humanoid Robot Rolls Off the Line

Uppsala Security Joins INTERPOL Gateway

DeepSeek Opens Approximately 150 Backend Engineer Positions

UpRoot Company Signs Industry-Academia Cooperation Agreement with Daegu University AI Department

South Korea digital asset bill stalls over stablecoin oversight

Orionx freezes withdrawals after 7 million dollars leaves custody

Iran Establishes Economic War Command Center

BLG Has a 77% Chance of Defeating AL in LPL Playoffs

Iranian Speaker Warns of Risks to U.S. Energy Facilities

Malaysia Plans to Use Huawei AI Chips to Advance RM2 Billion Sovereign AI Project

Huawei Launches Mate XT 2 with Kirin 9050 Pro Chip

Bitcoin Experiences Largest Deleveraging Since 2023

Philippine Central Bank Plans to Suspend Registration of New Payment System Operators










