小红书看到一个热门帖，为什么 web3 脏了简历 热门评论包括： 大厂 HR 看见简历 web3，会立即扣上八个大字：坑蒙拐骗，心气浮躁 看情况，如果你想去的大厂是新葡京或东南亚，算加分 啥都脏，gap 脏 35 岁脏乙方待久了脏甲方待久了脏换公司多了脏 能在币安实习有含金量，而且还觉得他思维开阔

🚨 SlowMist TI Alert 🚨 MistEye has detected a cross-registry supply chain attack targeting developers through malicious packages published to npm, PyPI, and The campaign includes 34+ malicious packages and 384+ related versions. Targeted communities include crypto, DeFi, Solana, Sui/Move, and AI developers. Potential attacker actions include theft of crypto wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, environment variables, and developer secrets. Some payloads also attempt persistence through .cursorrules, CLAUDE.md, Git hooks, shell hooks, cron, systemd, and SSH. Remove affected packages immediately. Isolate impacted systems, preserve logs, rotate exposed credentials, rebuild CI runners and developer machines from clean images, and review GitHub, cloud, SSH, and wallet activity. As always, stay vigilant!