PANews 3月3日消息,GoPlus中文社區在X平台發布預警稱,朝鮮黑客向npm註冊表發布了一組26個惡意軟件包,這些惡意軟件包都附帶一個安裝腳本(“install.js”),該腳本會在軟件包安裝過程中自動執行,進而運行位於“vendor/scrypt-js/version.js”中的惡意代碼,惡意代碼會通過同一惡意URL下載並執行遠程訪問木馬(RAT),實施鍵盤記錄、剪貼簿竊取、瀏覽器憑證收集、TruffleHog秘密掃描Git倉庫和SSH密鑰竊取等惡意行為。此次事件與一個名為“Famous Chollima”的朝鮮黑客活動相關。 請用戶和開發者在安裝軟件包時注意檢查來源和安全性,避免以下26個惡意軟件,以免造成隱私洩露或資產損失:
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
相關文章