Cybersecurity firm SlowMist has detected a high-risk npm worm, dubbed "Mini Shai-Hulud," that is actively targeting cryptocurrency information. The worm spreads through projects like TanStack and UiPath by hijacking GitHub credentials to publish malicious packages. It is designed to steal CI/CD keys, cloud service credentials, and cryptocurrency wallet information.
SlowMist advises affected projects to inspect the router_init.js file for signs of compromise, rotate any exposed credentials, and maintain vigilance for suspicious activity. This proactive approach is crucial to mitigate the risks posed by this malicious software.
SlowMist Identifies High-Risk npm Worm Targeting Crypto Data
Aviso Legal: O conteúdo disponibilizado no Phemex News é apenas para fins informativos. Não garantimos a qualidade, precisão ou integridade das informações provenientes de artigos de terceiros. Este conteúdo não constitui aconselhamento financeiro ou de investimento. Recomendamos fortemente que você realize suas próprias pesquisas e consulte um consultor financeiro qualificado antes de tomar decisões de investimento.