Freelance dev shop Toptal caught serving malware after GitHub account break-in
恶意代码潜伏在5,000多个下载中，Socket DeskineerDeveloper自由职业平台Toptal在攻击者闯入其系统并开始通过开发人员帐户分发恶意软件后，无意间传播了恶意代码。
New Mobile Phone Forensics Tool
The Chinese have a new tool called Massistant.Massistant is the presumed successor to Chinese forensics tool, “MFSocket”, reported in 2019 and attributed to publicly traded cybersecurity company, Meiya Pico.The forensics tool works in tandem with a corresponding desktop software.Massistant gains acc
Malicious npm packages target Ethereum developers
恶意 npm 包针对以太坊开发人员，冒充 Hardhat 插件窃取私钥和敏感数据。Hardhat 由 Nomic Foundation 开发，是一款必不可少的以太坊工具，可通过可自定义的插件简化智能合约和 dApp 开发。Socket 研究人员报告了针对 Nomic Foundation 和 Hardhat 平台的供应链攻击，攻击者使用恶意 npm 包 [...]
