SlowMist: Cross-registry supply chain attack detected, multiple malicious packages have affected crypto, AI, and other developer communities
Foresight News reports that SlowMist has issued a security alert stating that its MistEye system detected a cross-registry supply chain attack targeting developers. Malicious packages have been published to npm, PyPI, and Crates.io, involving more than 34 malicious packages and over 384 related versions. Possible attacker actions include stealing crypto wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, environment variables, and developer keys.
The affected developer communities include crypto, DeFi, Solana, Sui/Move, and AI sectors. Some malicious packages also attempt to achieve persistent presence via .cursorrules, CLAUDE.md, Git hooks, shell hooks, cron, systemd, and SSH. SlowMist recommends immediately removing affected packages, isolating infected systems, rotating exposed credentials, rebuilding CI runners and developer machines from clean images, and conducting a comprehensive review of GitHub, cloud services, SSH, and wallet activity records.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
McEwen’s $55M Ontario asset sale fuels gold growth plans
US Stock Market Movement | US clinical-stage biopharmaceutical company Retension Pharmaceuticals (RTSN.US) debuts on the US stock market; shares fall over 10% after opening
As of press time, the stock has dropped more than 10%, trading at $10.77.
U.S. Stocks Move | Trex Bio (TRXB.US) Debuts on the U.S. Stock Market, Drops Over 1.3% After Opening
As of press time, the stock has fallen by over 1.3%, trading at $13.805.
BUZZ - Broker Perspectives: Analysts Express Doubts Over Starbucks and Chipotle Acquisition
Latest Update October 9 – The Financial Times reported on Thursday that Starbucks (SBUX.O) has explored a potential acquisition of Chipotle (CMG.N). This move would bring CEO Brian Niccol back to the Mexican burrito chain he once led. Starbucks declined to comment, saying the company remains "fully focused" on its business turnaround. Chipotle's stock fell about 4% to $31.32 on Friday, after surging 6.2% in the previous trading session. Limited strategic rationale BTIG expressed "high skepticism," stating that the deal does not make sense operationally, would cause significant dilution for Starbucks shareholders, and would disrupt management operations. "Over the years we've heard many stories about multi-brand acquisitions... but few have materialized, and even fewer have succeeded," BTIG noted. William Blair pointed out that Starbucks’ $9.4 billion net debt as of June makes it difficult to finance an acquisition and could push the combined company’s leverage ratio to about six times—considered high for the restaurant industry. D.A. Davidson stated the probability of the deal succeeding is 20% or less, given the significant differences between the brands and the apparent lack of clear synergies. Raymond James noted that due to the low overlap in menus, supply chain benefits are likely limited, while performance among multi-brand restaurant platforms has been mixed. eMarketer’s Suzy Davidkhanian commented that Niccol's familiarity may reduce execution risk, but investors might still see the deal as a "costly distraction" during Starbucks’ transformation. (For the convenience of non-English speakers, Reuters automatically translates its reports into several other languages. Automated translation may be inaccurate or fail to include necessary context; Reuters does not guarantee the accuracy of automated translated text and provides it solely for readers’ convenience. Reuters accepts no responsibility for any damage or loss resulting from the use of automated translation functions.)
Crypto prices
More
