Sila and equipment cables from users from users

The Great Sula and Trading Bot is exposed to hide the gradual malware.

According to the Slanna-Par Storage, the current Sularana-Parn-bread, according to the security writer vaccine, has resulted in real open source device to collect “Zigp 2002” user verification. After the specified user, the investigation was stolen after the specified user and began the investigation.

The malicious Gelfub storage in question was slow to “relatively high stars and forks”. All code indicates that all the details are made up of three weeks ago, clearly obstacles and uniformally indirectly, as a legal project in accordance with a legal project.

The project is a node. The third party packaging is transferred and third party package crypto-position is dependent on asylum. “This package was delayed by the official NPM record when an additional diagnosis is removed.

Related: Charlotte's users with Wallet Cloft

Suspicious npm pack

The package could not download in the NPM record (NPM) register (NPM) register (NPM) register (NPM) register (NPM) register (NPM) register (NPM) register (NPM) register (NPM) registration (NPM) register requires the victim to ask how the package has dropped. It came to realize that the disabilities were discussing the library in the ten gesture storage.

After checking the package, the slow researchers found that JSJIAMIIA.com.v7, they have been the most shocked. After a growing investigations, checks confirm that it is a malicious package that examines local files, and will be automatically activated from the distance server.

Related-Northern Korean Hards North Korea hackers that adjusted symptomatic projects using unusual mac explores

More than one single stones

An additional diagnosis in the summer list appeared that the attacker controls the collection of GitHub accounts set. These accounts were used for its followers to spread malware when driving malware and astrology.

A number of skill package, BS58-encryts, BS58-Encrypted – 1.0.3. This package created On June 12, the slow researchers said the attacker, the attacker began to distribute projects and node.

The event is the latest in the software supply chain of software supply to investigate the TECPTO users. Similar plans in the latest week are targeting Firefox users with false wallet extensions and have used Getigards to accommodate your information system.

Magazine: Unusual ‘Nal Address' As Iake, millions of PCs ‘balloons' malicious wings are exposed