Security Alert: 30 malicious npm packages disguised as trading bot repositories, targeting the theft of developer keys and mnemonic phrases
By: rootdata|2026/07/01 20:45:00
0
Share
Prefer us on Google
SlowMist issued a security alert, detecting a coordinated malicious npm supply chain attack. The attackers utilized fake trading bot repositories and DeFi-themed npm packages to deploy JavaScript information stealers, targeting npm users, DeFi developers, and trading bot users.
This attack involved 30 malicious npm packages, among which stake-math@3.5.4 appeared as a locked dependency in the donoaccestag/forex-mt5-trading-bot repository. This repository presented approximately 2300 highly homogeneous bulk-generated forks, mostly concentrated under the poly-stocks account, with signals being exceptionally clear. The sensitive data that attackers could steal is extensive, including cryptocurrency wallet libraries, browser cookies and saved passwords, browsing history, developer credentials, shell history, password manager libraries, private keys, mnemonic phrases, and API tokens exposed in source code.
SlowMist recommends that developers immediately remove the affected npm packages, audit package.json and package-lock.json, and check CI logs for any of the 30 malicious packages; consider any system that has executed npm install as potentially compromised, rotate all exposed wallets, private keys, npm tokens, cloud credentials, SSH keys, and API tokens, and rebuild the affected environment from a clean image.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
CryptoJS Vulnerability Leads to $5.7 Million Loss Across Over 2,100 Wallets
🚨 The CryptoJS vulnerability has led to a loss of $5.7 million across over 2,100 addresses.
💼 In the first major wave on May 27, 2026, 431 accounts were drained, with the largest loss seen on the BTC side.
📱 Affected applications include RWallet, Bexo Wallet, NanChat, Bitcoin Libre, and Milo Wall...
Largest Joint Military Exercise Between South Korea and the U.S. Involving 4,400 Personnel
The U.S. and South Korea conducted the largest joint logistics support exercise ever, involving more than 4,400 personnel and approximately 600 pieces of equipment. As the joint logistics support exercise expands, the three countries—South Korea, the U.S., and Japan—are pursuing separate multi-domai...
How to Start an Olive Account: Explanation of SBI Securities Integration and Account Opening
BarnBridge Smart Yield's Old Proposals Pose Token Authorization Risks, Users Advised to Revoke Authorization
GPT-5.6 Calls 64 Agents to Propose a 50-Year Conjecture Proof
James Check Expects Major Liquidation in Bitcoin Companies
📉 James Check predicts that the bottom process for $BTC may extend over time. ⏳ The sideways market is testing the patience of remaining weak investors. 💰 According to Check, spot demand is currently meeting ETF and institutional sales. 🏢 He expects only a few large players to remain among compan...
Gate Completes Security Change Investigation, No Information Leakage Found
SecondFi Updates on Theft Incident, Launches Isolation Mode and Secure Wallet Export Feature
How has the Pacific "fever" turned extreme weather into a cash machine for Wall Street?
The extreme weather caused by El Niño is sweeping through the commodity markets, becoming not only a "weather code" for quantitative funds and traders to frantically profit from, but also quietly driving up global food prices and the cost of living for ordinary people.
EMURGO announces that the Cardano wallet SecondFi, which was attacked by hackers, will permanently cease operations
The founding entity of Cardano, EMURGO, stated on Monday that the wallet service SecondFi, which was hacked, will not resume normal operations even after a security audit is completed, and requires all users to migrate their assets through the official recovery process. SecondFi is a rebranded versi...
WEEX Launches Depth Chart for Spot Trading
WEEX Spot now supports Depth Chart, helping users visualize buy and sell orders, spot liquidity walls, and understand market depth more clearly before placing trades.
Slow Fog: curl fixes 18 security vulnerabilities, it is recommended to upgrade curl/libcurl as soon as possible and investigate related risks
The Chief Information Security Officer of Slow Fog, 23pds, posted on the X platform that curl recently fixed 18 security vulnerabilities, involving issues such as authentication bypass, memory safety, and host verification, among which one libcurl vulnerability has existed for about 25 years. The ri...
Sun Yuchen and He Yi have consecutively accused Zhu Pan of fraud, CoinUp responded: Zhu Pan is not the operator of the platform
Binance Co-CEO He Yi posted on X stating, "Zhu Pan once impersonated others to scam me unsuccessfully, and also impersonated me to scam Brother Sun." Tron founder Justin Sun immediately retweeted in response, saying, "This is absolutely true, the industry should collectively resist such fraudulent b...
One-stop stablecoin wallet UU Wallet fully upgrades its agency system
UU Wallet officially announced today a comprehensive upgrade to its agency system, fully delegating reward eligibility to every user. After users meet the corresponding conditions, the system will automatically upgrade their status, which will remain valid long-term and will not be downgraded. The h...
WEEX Live mode: Monitor 20 trading pairs at once and trade like a pro
WEEX Live mode: Multi-screen desktop layout for 20 pairs, TradingView charts, one-click layout, and smart guides. Trade like a pro now.
Customize Your Spot Trading Page: Drag Modules and Move the Order Panel Where You Want It
Set up your WEEX Spot trading page around the way you trade. Drag supported modules, show or hide key panels, move the order panel to the left or right, and use “Reset layout” at any time to return to the default setup.
The impossible triangle is simply a pseudo problem
A long time ago, the cryptocurrency industry found its true purpose. But ironically, the path it built for this purpose excluded almost everyone who would actually use it.
WEEX App Just Got Smarter – New Tabs for Faster Trades & Easy Asset Management
Discover WEEX App’s new trading tabs: Futures, TradFi, Copy Trade (users)/ Elite Trade (lead traders) on the same page. Solve messy navigation, find opportunities faster, and manage all trades in one place.
India's cryptocurrency tax review exposes approximately $930 million in undeclared income, with a comprehensive strengthening of itemized reporting and cross-platform verification for the 2026 tax season
As India's tax enforcement intensifies, cryptocurrency investors face stricter reporting and compliance requirements in the 2026 tax season, with incorrect declarations potentially triggering fines and audits. Reports indicate that under current rules, cryptocurrency gains are still subject to a 30%...
$75 billion in foreign capital has fled, and South Korean retail investors have absorbed it all using leverage
Despite the accelerated migration of Korean funds from cryptocurrency to the stock market, the Korean market remains an important barometer for global cryptocurrency retail liquidity and recovery turning points.
Get Paid to Onboard? Try WEEX’s New Homepage with Rewards for Registration, Deposit & Trade
WEEX just launched a brand new homepage and a 3-step new user onboarding guidance. Complete Registration → Deposit → Trade to earn exclusive rewards. Faster navigation, clear progress, and instant bonuses. Download the latest WEEX App to try it now.
What Is Quick Trade on WEEX? 2 Ways WEEX Ends Chart-Panel Jumping
WEEX has launched the quick trade features on futures trading, allowing you to place orders directly on the price axis. No more switching panels. 4 order units supported. Live on WEEX Futures Web.
Bitcoin Crash to $50,000 or Bear Trap Before $100,000? Deep Dive for WEEX Traders
Is Bitcoin heading to $50k or getting ready to blast off to $100k? Check out this breakdown of liquidations, ETF flows, and whales buying the dip.
Arthur Hayes has fully liquidated HYPE and NEAR, and the market peak may occur between September
BitMEX co-founder Arthur Hayes posted on the X platform that he has liquidated all HYPE and NEAR tokens and will explain the reasons in an article titled "Reality Check" to be released next Tuesday.The reasons Hayes provided include: the Iran war and inventory replenishment leading to rising energy ...
SOL Price Today: Live Solana Price, Charts & Market Data
Find the SOL price today with real-time data, plus key drivers behind Solana's movement and actionable trading tips. Read the full analysis on WEEX.
White hat hackers help recover 2 million dollars' worth of ETH locked in the 2016 ICO contract
According to The Block, a developer using the pseudonym Florent helped rescue approximately 1003 ETH (worth about $2 million) that had been trapped in the 2016 HongCoin ICO contract for nine years through white hat hacking techniques. The ICO was supposed to automatically refund due to not meeting t...
The midlife crisis of Crypto GP: Without PMF, there is no next check from LP
After losing the vastness of the stars and the sea, most Crypto GPs that failed to earn excess returns in this cycle must pragmatically launch a product with PMF, either by proving their ability to help LPs earn excess returns through some niche market, or by solving specific problems for LPs/partne...
GoPlus: $15.5 million in funds and LP urgently need self-rescue in the DxSale security incident
Regarding the incident "DxSale accused of using a backdoor to withdraw $7.3 million in liquidity funds," the security company GoPlus stated that the attack may have been an inside job, and there is still $15.5 million in funds and LP urgently needing rescue. GoPlus recommends that the project team i...
Babylon proposes to integrate native Bitcoin collateral on Aave V4 without the need for cross-chain bridges and custody
Babylon Labs has initiated a temperature check proposal in the Aave community, proposing to integrate native Bitcoin as collateral on Aave V4 through the Babylon Trustless Bitcoin Vaults protocol.This solution does not require wrapping, cross-chain bridges, or custodians. Users will lock Bitcoin in ...
Solana ETFs Are Here, But Why Isn’t SOL Price Soaring Past $200?
Key Takeaways Solana ETFs have launched, yet SOL price remains stuck below $200, reminiscent of Ethereum’s post-ETF performance…
CryptoJS Vulnerability Leads to $5.7 Million Loss Across Over 2,100 Wallets
🚨 The CryptoJS vulnerability has led to a loss of $5.7 million across over 2,100 addresses.
💼 In the first major wave on May 27, 2026, 431 accounts were drained, with the largest loss seen on the BTC side.
📱 Affected applications include RWallet, Bexo Wallet, NanChat, Bitcoin Libre, and Milo Wall...
Largest Joint Military Exercise Between South Korea and the U.S. Involving 4,400 Personnel
The U.S. and South Korea conducted the largest joint logistics support exercise ever, involving more than 4,400 personnel and approximately 600 pieces of equipment. As the joint logistics support exercise expands, the three countries—South Korea, the U.S., and Japan—are pursuing separate multi-domai...
How to Start an Olive Account: Explanation of SBI Securities Integration and Account Opening
BarnBridge Smart Yield's Old Proposals Pose Token Authorization Risks, Users Advised to Revoke Authorization
GPT-5.6 Calls 64 Agents to Propose a 50-Year Conjecture Proof
James Check Expects Major Liquidation in Bitcoin Companies
📉 James Check predicts that the bottom process for $BTC may extend over time. ⏳ The sideways market is testing the patience of remaining weak investors. 💰 According to Check, spot demand is currently meeting ETF and institutional sales. 🏢 He expects only a few large players to remain among compan...
...
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
