Supply chain attacks affect PyPI/npm/crates.io, with over 34 malicious packages targeting cryptocurrency and AI developers

By: rootdata|2026/05/26 04:45:01

According to Slow Fog's disclosure, the security agency MistEye detected a cross-registry supply chain attack incident, where attackers targeted developers in the fields of cryptocurrency, DeFi, Solana, Sui/Move, and AI by publishing malicious packages on npm, PyPI, and crates.io. This attack activity includes more than 34 malicious packages and over 384 related versions. The attackers may steal cryptocurrency wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, environment variables, and developers' confidential information.

Some of the malicious payloads also attempted to achieve persistence through .cursorrules, CLAUDE.md, Git hooks, shell hooks, cron, systemd, and SSH. Developers are advised to immediately remove the affected packages, isolate the affected systems, retain logs, rotate exposed credentials, rebuild CI environments and developer machines from clean images, and review GitHub, cloud services, SSH, and wallet activity logs.

-- Price

Federal Reserve Chairman Waller's debut featured a significant slimming statement, the cancellation of forward guidance, refusal to submit the dot plot, and the establishment of five working groups, vowing to uphold the 2% inflation target, which triggered a sharp decline in U.S. stocks and a surge ...

From Disruptor to Shadow Market: The Crypto Market is Becoming a Colony of Traditional Finance

"Coin-stock linkage" has evolved from the early stage of macro correlation and one-way penetration of emotional funds to the current 3.0 stage, where on-chain perpetual contracts provide extended trading hours and emotional signal value for traditional assets 24/7, and participate in Pre-IPO pricing...

Dalio's important long article: How to position in the current market environment?

Do not confuse the excitement for new technologies with whether those tech stocks are attractive.

OKX Star analyzes Binance's competitive advantages: when regulation levels the playing field, competition has just begun

OKX founder Star published a lengthy article, systematically analyzing Binance's competitive advantages over the years: regulatory arbitrage, speculative narrative cycles, social media control, and superficial compliance, stating that the essence of these advantages is not product capability, but ra...

New gameplay for participating in initial offerings on cryptocurrency exchanges

In this competition for cutting-edge assets, what has always been truly scarce is not the technology, but the underlying equity itself.

Why Is Bitcoin Down Today? What the Hawkish FOMC Means for SpaceX, Gold and Nasdaq

Why is Bitcoin down today? A hawkish FOMC pressured crypto and gold, while SpaceX surged to a $2.5 trillion valuation and Nasdaq gained attention. Here's what happened and why traders are looking beyond Bitcoin.

DeepSeek Financing Story

DeepSeek's financing insider information exposed: "Four-hour meeting" fully demonstrates Liang Wenfeng's determination for AGI, over a hundred institutions involved, Sequoia and Hillhouse rarely absent, not poaching talent is the hardest red line.

Morning Report | DeepSeek completes over $7 billion in financing, with a valuation exceeding $50 billion; Musk's personal wealth has surpassed the total market value of Bitcoin

Overview of Important Market Events on June 16

Cursor, why did you get on Musk's spaceship?

SpaceX set a record with its IPO, spending a staggering $60 billion to acquire the popular AI programming unicorn Cursor just four days later. Musk is using the ultimate puzzle of "super computing power + top coding engine" to propel the market value skyrocketing, surpassing Amazon in one fell swoop...

In the name of charity, for the benefit of the family: How the Trump family turned charity into profit?

This set of "beautiful rhetoric and value return to one's own people" has not stopped at charitable foundations; it has now almost been transferred intact to American Bitcoin.