coin-img-ETHETH-0.25%coin-img-BTCBTC+0.46%coin-img-HYPEHYPE+0.43%coin-img-SOLSOL-0.54%coin-img-XRPXRP-0.26%coin-img-USDCUSDC-0.02%coin-img-DOGEDOGE-0.11%coin-img-TRXTRX+0.58%coin-img-ETHETH-0.25%coin-img-BTCBTC+0.46%coin-img-HYPEHYPE+0.43%coin-img-SOLSOL-0.54%coin-img-XRPXRP-0.26%coin-img-USDCUSDC-0.02%coin-img-DOGEDOGE-0.11%coin-img-TRXTRX+0.58%coin-img-ETHETH-0.25%coin-img-BTCBTC+0.46%coin-img-HYPEHYPE+0.43%coin-img-SOLSOL-0.54%coin-img-XRPXRP-0.26%coin-img-USDCUSDC-0.02%coin-img-DOGEDOGE-0.11%coin-img-TRXTRX+0.58%coin-img-ETHETH-0.25%coin-img-BTCBTC+0.46%coin-img-HYPEHYPE+0.43%coin-img-SOLSOL-0.54%coin-img-XRPXRP-0.26%coin-img-USDCUSDC-0.02%coin-img-DOGEDOGE-0.11%coin-img-TRXTRX+0.58%

SlowMist Flags Cross-Registry Supply-Chain Attack Aimed at Crypto and AI Developers

Onchain security firm PeckShield (@PeckShieldAlert) reported that SlowMist's threat-intelligence platform MistEye has identified a cross-registry software supply-chain attack targeting developers. The campaign has distributed malicious packages through the three major repositories—npm, PyPI and Crates.io—spanning more than 34 malicious packages and over 384 related versions. The infected packages are aimed at developers across cryptocurrency, DeFi, Solana, Sui/Move and AI ecosystems. SlowMist warned the malware could be used to steal crypto wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data and other developer secrets. Some payloads also attempt to maintain persistence via .cursorrules, CLAUDE.md, Git hooks, cron, systemd and SSH. SlowMist advised developers to remove affected packages immediately, isolate potentially compromised systems, rotate any exposed credentials, rebuild CI environments and developer machines from clean images, and conduct a comprehensive review of activity tied to GitHub, cloud services, SSH and wallets.
Selected
SUI
SUI-1.25%
SOL
SOL-0.39%
Disclaimer: The content above is only the author's opinion and does not represent BingX’s stance. It shall not be construed as investment advice from BingX. For details, refer to the Terms and Conditions.