23pds (山哥)
@im23pds
Joined June 2014
6K Following 15.2K Followers
TrapDoor 加密货币窃取活动正在npm、PyPI和
目前已发现34个恶意软件包和384个版本及构件，攻击者持续在各生态系统中推送新版本。
TrapDoor主要针对加密货币、DeFi、AI和安全领域的开发者。
Show more
🚨 BREAKING: Active supply chain attack across npm, PyPI, and Crates.io.
Socket detected TrapDoor, a crypto stealer campaign hitting 34 malicious packages and 384 versions and artifacts, with attackers repeatedly pushing new releases across ecosystems.
TrapDoor targets #crypto#, #DeFi#, AI, and security developers, stealing wallets, SSH keys, cloud credentials, GitHub tokens, browser data, env vars, and API keys.
Socket detected releases with a median detection time of 5 minutes, 27 seconds. The fastest detection occurred 58 seconds after publication.
Show more
