比推消息,网络安全人员发现最新威胁,针对Atomic钱包和Exodus钱包用户的攻击者正将恶意软件包上传至在线代码存储库,意图窃取加密货币私钥。ReversingLabs安全研究人员指出,该漏洞利用手段通过将恶意代码隐藏在看似合法的npm软件包中实施攻击,这些预先构建的代码包被软件开发人员广泛使用。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.