npm

Tin tức từ ChainCatcher, theo giám sát của Slow Mist, MistEye đã phát hiện một cuộc tấn công chuỗi cung ứng npm quy mô lớn, ảnh hưởng đến hệ sinh thái Keyv/Cacheable. Kẻ tấn công đã phát hành hơn 2,000 phiên bản gói độc hại, bao gồm keyv@6.0. Keyv là thư viện trừu tượng lưu trữ khóa-giá trị được sử dụng rộng rãi, hỗ trợ các backend như Redis, SQLite, PostgreSQL, MongoDB, với khoảng 127 triệu lượt tải xuống mỗi tuần, dẫn đến sự lộ rõ rõ rệt trong chuỗi cung ứng hạ nguồn.Phương pháp tấn công rất giống với hoạt động sâu bọ npm Shai-Hulud trước đó, chỉ ra một cuộc tấn công chuỗi cung ứng tự động hóa cao và có thể mở rộng. Các hành vi tấn công tiềm tàng bao gồm đánh cắp thông tin xác thực, rò rỉ biến môi trường, rò rỉ khóa CI/CD, phát tán tải trọng từ xa và lây lan qua môi trường phát triển bị xâm nhập. Đội ngũ an ninh nên ngay lập tức xác định và loại bỏ các phiên bản gói bị ảnh hưởng, nâng cấp lên phiên bản an toàn đã được xác minh, xem xét các tệp khóa phụ thuộc và nhật ký xây dựng, giám sát các liên kết đáng ngờ, thay đổi thông tin xác thực bị rò rỉ, và sau khi xác nhận bị ảnh hưởng, tái tạo môi trường.

Tin tức từ ChainCatcher, SlowMist đã phát hành cảnh báo an ninh, phát hiện một cuộc tấn công chuỗi cung ứng npm độc hại phối hợp, kẻ tấn công đã lợi dụng kho lưu trữ bot giao dịch giả mạo và các gói npm chủ đề DeFi để phát tán trình thu thập thông tin JavaScript, mục tiêu nhắm vào người dùng npm, nhà phát triển DeFi và người dùng bot giao dịch.Cuộc tấn công này liên quan đến 30 gói npm độc hại, trong đó stake-math@3.5.4 xuất hiện như một phụ thuộc khóa trong kho lưu trữ donoaccestag/forex-mt5-trading-bot, kho này trình bày khoảng 2300 nhánh được tạo ra hàng loạt có độ đồng nhất cao, phần lớn tập trung dưới tài khoản poly-stocks, tín hiệu rất rõ ràng. Phạm vi dữ liệu nhạy cảm mà kẻ tấn công có thể đánh cắp rất rộng, bao gồm thư viện ví tiền điện tử, Cookie trình duyệt và mật khẩu đã lưu, lịch sử duyệt web, thông tin xác thực của nhà phát triển, lịch sử Shell, thư viện trình quản lý mật khẩu, khóa riêng, cụm từ ghi nhớ và mã thông báo API được lộ trong mã nguồn.SlowMist khuyến nghị các nhà phát triển ngay lập tức gỡ bỏ các gói npm bị ảnh hưởng, kiểm tra package.json và package-lock.json cũng như nhật ký CI xem có chứa bất kỳ gói độc hại nào trong số 30 gói đó hay không; coi các hệ thống đã thực hiện npm install là có thể đã bị xâm nhập, thay đổi tất cả ví, khóa riêng, mã thông báo npm, thông tin xác thực đám mây, khóa SSH và mã thông báo API đã lộ, và xây dựng lại môi trường bị ảnh hưởng từ hình ảnh sạch.

Tin tức từ ChainCatcher, Slow Mist đã công bố rằng hơn 140 gói npm liên quan đến Mastra đã bị tấn công chuỗi cung ứng, các phiên bản bị ảnh hưởng sẽ đưa vào phụ thuộc độc hại easy-day-js@1.11.22 và kích hoạt việc thực thi mã do kẻ tấn công kiểm soát trong giai đoạn cài đặt.

ChainCatcher thông báo, theo giám sát của SlowMist, một hoạt động phần mềm độc hại chuỗi cung ứng Rust mới có tên IronWorm đang tấn công môi trường phát triển và hệ sinh thái Web3 thông qua các gói npm độc hại. Các hành vi tấn công tiềm năng bao gồm đánh cắp thông tin xác thực, đánh cắp cụm từ ghi nhớ ví và mật khẩu, thao túng kho GitHub, phát hành gói độc hại, rò rỉ bí mật CI/CD, điều khiển lệnh dựa trên Tor và ẩn mình bằng rootkit eBPF.Các đội ngũ an ninh nên kiểm tra các cam kết hồi tố trong kho, các nhánh nghi ngờ, các móc xây dựng bất ngờ và các cam kết của các danh tính tự động như claude, dependabot, renovate hoặc github-actions. Khuyến nghị loại bỏ hoặc ngừng sử dụng các phiên bản gói bị ảnh hưởng, phát hành phiên bản sạch, thay đổi tất cả các khóa và token bị rò rỉ, xem xét các thành phần GitHub Actions và xây dựng lại các hệ thống phát triển hoặc CI có thể bị tổn hại từ hình ảnh sạch.

SlowMist has issued a security alert, detecting an active npm supply chain attack targeting @redhat-cloud-services related packages. Currently, over 31 packages have been confirmed affected, with a weekly download volume of approximately 116,000 times, and stolen credentials exist in more than 300 GitHub repositories. This attack method is highly similar to the previous "Shai-Hulud" npm attack, including credential theft, creation of malicious repositories, and automated secret leakage. New suspicious repositories continue to emerge, indicating that the attack is still ongoing, and developers are still being continuously infected.Potential harms include: theft of GitHub/npm tokens, leakage of AWS/GCP/Azure cloud credentials, collection of SSH keys and Kubernetes secrets, leakage of local environment and wallet data, creation of malicious repositories and persistence operations, and even potentially destructive actions after tokens are revoked. It is recommended to immediately remove or downgrade affected @redhat-cloud-services package versions, conduct a comprehensive audit of CI/CD workflows and dependency installations, rotate all GitHub, npm, cloud service, SSH, and wallet-related keys, retain logs, and rebuild exposed developer machines or Runners from clean images while maintaining a high level of vigilance.

According to Slow Fog's disclosure, the security agency MistEye detected a cross-registry supply chain attack incident, where attackers targeted developers in the fields of cryptocurrency, DeFi, Solana, Sui/Move, and AI by publishing malicious packages on npm, PyPI, and crates.io. This attack activity includes more than 34 malicious packages and over 384 related versions. The attackers may steal cryptocurrency wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, environment variables, and developers' confidential information.Some of the malicious payloads also attempted to achieve persistence through .cursorrules, CLAUDE.md, Git hooks, shell hooks, cron, systemd, and SSH. Developers are advised to immediately remove the affected packages, isolate the affected systems, retain logs, rotate exposed credentials, rebuild CI environments and developer machines from clean images, and review GitHub, cloud services, SSH, and wallet activity logs.

According to the blockchain security organization SlowMist (@SlowMist_Team), a highly complex npm worm named "Mini Shai-Hulud" is spreading through well-known developer projects such as TanStack, UiPath, and DraftLab, as monitored by their threat monitoring system MistEye. Attackers hijack GitHub credentials to publish malicious packages disguised as legitimate updates, embedding a hidden script router_init.js that runs silently in CI/CD environments like GitHub Actions, specifically designed to steal CI/CD keys, cloud infrastructure keys, and cryptocurrency wallet information, using GitHub's own infrastructure for data exfiltration.SlowMist has synchronized relevant threat intelligence (IOC) with clients and recommends that projects using the affected packages immediately check their CI/CD pipelines for the presence of the router_init.js file, rotate all exposed GitHub, cloud service, and cryptocurrency credentials, and continuously monitor for abnormal background activities in the development environment.

The attacker stole the npm access token of the chief maintainer of Axios, the most popular HTTP client library for JavaScript, and used that token to publish two malicious versions containing cross-platform remote access trojans (RATs) (axios@1.14.1 and axios@0.3.4), targeting macOS, Windows, and Linux systems. The malicious packages were removed from the npm registry about 3 hours after being published.According to data from security company Wiz, Axios is downloaded over 100 million times weekly and exists in about 80% of cloud and code environments. Security company Huntress detected the first infections just 89 seconds after the malicious packages went live and confirmed that at least 135 systems were compromised during the exposure window. Notably, the Axios project had previously deployed modern security measures such as OIDC trusted publishing mechanisms and SLSA provenance proofs, but the attacker completely bypassed these defenses. Investigations revealed that while configuring OIDC, the project retained the traditional long-lived NPM_TOKEN, and npm defaults to using the traditional token when both coexist, allowing the attacker to publish without breaching OIDC.

According to market news, Socket has detected that version 1.14.1 of the npm core package axios is experiencing an active supply chain attack. The attacker injected a malicious dependency package to implant malicious code into axios. Developers using axios are advised to immediately pin the version and review the project's lock files.

According to Cryptopolitan, a new type of malware called GhostClaw is targeting cryptocurrency wallets on macOS devices.This malware disguised itself as a legitimate OpenClaw CLI tool and was present in the npm registry for a week before being removed after infecting 178 developers. Once developers run the "npm install" command, a hidden script globally installs the GhostClaw package and evades detection through obfuscated configuration files. GhostClaw scans the clipboard every three seconds, capturing private keys, seed phrases, public keys, and other cryptocurrency wallet and transaction-related data.After the second stage payload is downloaded, GhostLoader scans for cryptocurrency wallet data in the Chromium browser, macOS Keychain, and system storage, clones browser sessions to gain access to logged-in wallets, and steals API Tokens that connect to AI platforms such as OpenAI and Anthropic. The stolen data is sent to the attackers via Telegram, GoFile, and command servers.

According to 23pds, the Chief Information Security Officer of Slow Fog Technology, an intelligence system has discovered a malicious npm package named "@openclaw-ai/openclawai" that is implementing a multi-layer attack.This malicious package disguises itself as a legitimate command-line tool called OpenClaw Installer, aimed at stealing sensitive user information, including system credentials, cryptocurrency wallet private keys, browser data, SSH keys, and Apple Keychain database, among others.

According to GMGN data, the BAGS ecosystem Meme token NPM experienced a short-term sharp decline, with its market value dropping from a peak of $8.9 million to $800,000, a decline of over 80% in 1 hour, and a trading volume of $13.2 million within 5 hours of its launch.It is reported that the narrative of the NPM token pays tribute to Isaac Z. Schlueter, the founder of the world's largest package manager NPM, who is hailed as the "God of Programming."ChainCatcher reminds users that Meme coins generally have no practical use cases, and their price volatility is significant, so investment should be approached with caution.

The Chief Information Security Officer of Slow Fog Technology, 23pds, has issued a security alert regarding the latest variant of the NPM supply chain attack, "Shai-Hulud 3." All project teams and platforms are advised to take precautions. It was previously suspected that the leak of the Trust Wallet API key could have led to the Shai-Hulud 2 attack.Shai-Hulud is a series of self-propagating worm-like supply chain attacks targeting the NPM ecosystem, aimed at stealing developer credentials, cloud keys, and environment secrets. The latest variant (referred to by the community as Shai-Hulud 3 or new strain) was discovered on December 28, 2025, by Aikido Security researcher Charlie Eriksen. The current spread is limited and may only be in the testing phase.

Chief Information Security Officer of Slow Fog Technology 23pds issued a security alert, the latest variant of the NPM supply chain attack "Shai-Hulud 3" is once again on the rise. All project parties and platforms are advised to take precautions. It was previously suspected that the leak of the Trust Wallet API key might have led to the Shai-Hulud 2 attack.

ChainCatcher message, Scam Sniffer has detected another attack on the NPM supply chain. The package @ctrl/tinycolor (with 2.2 million downloads per week) has released a malicious version that runs an information-stealing program during the npm postinstall script execution to scan and steal sensitive data.This malicious payload abused the legitimate sensitive information scanning tool TruffleHog. Please check if you have downloaded the affected version, pause any installation/update operations, and pin the version to a known safe version.

ChainCatcher news, DuckDB's official Twitter account stated that the DuckDB Node.js and Wasm packages were compromised with malware in a recent npm supply chain attack. The official team has investigated and deprecated the affected versions, while releasing new versions. DuckDB stated that, according to npm data, no users have downloaded the affected packages. The team has released a security announcement detailing the post-analysis and response measures.

ChainCatcher message, Slow Mist Technology's Chief Information Security Officer 23 pds posted on X platform that the DuckDB NPM account was compromised, and malicious versions such as duckdb, duckdb-wasm, etc. were released. These malware are consistent with wallet-stealing malware seen in supply chain attacks. Please be aware of risk prevention.

ChainCatcher news, according to CertiK Alert monitoring, the NPM account of developer Qix has been phished, with attackers injecting malicious code into npm. According to Security Alliance, the attackers seem to have profited only about 0.05 dollars worth of ETH and 20 dollars worth of Meme coins.Earlier reports indicated that Ledger's Chief Technology Officer Charles Guillemet stated, "A large-scale supply chain attack is currently underway: the NPM account of a well-known developer has been compromised. The affected package has been downloaded over 1 billion times, which means the entire JavaScript ecosystem may be at risk. The malicious code works by silently altering cryptocurrency addresses in the background to steal funds."

ChainCatcher message, according to market news, well-known developer qix has had npm packages injected with malicious code due to a phishing attack, with related packages including chalk, strip-ansi, color-convert, etc.The attack method involves hooking wallet functions, tampering with ETH/SOL transaction receiving addresses, and replacing addresses in network responses. User advice: be sure to verify the recipient and amount in the wallet interface, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value operations.

ChainCatcher message, the Socket Security Research Team has discovered four malicious npm packages that target Binance Smart Chain (BSC) and Ethereum users' wallets. These packages are pancake_uniswap_validators_utils_snipe (350 downloads), pancakeswap-oracle-prediction (445 downloads), ethereum-smart-contract (305 downloads), and env-process (1,054 downloads), with a total download count exceeding 2,100.The attackers use obfuscated JavaScript code to calculate the percentage of the target wallet balance and attempt to transfer up to 85% of the assets to a wallet address under their control.