Hacken: There are scammers posing as project parties to induce developers and auditors to download suspicious repositories. Please be aware of the ri
Blockchain security organization Hacken has recently discovered a scam that has emerged on platforms such as Telegram and Linkedin. It is worth noting that this scam targets developers and auditors in the cryptocurrency industry.
Specifically, scammers on social networks specifically target individuals who provide technical services, convincing them to download a repository in the name of a legitimate project. In the repository, there is an unstable "npm run" command in the code. When executed, it may jeopardize the user's file system. This method is similar to previous scams involving fraudulent zip files and PDFs.
To strengthen defense against this strategy, consider the following measures:
- Be cautious when downloading repositories, especially when prompted by unfamiliar sources;
- Carefully check repository code using tools such as Semgrep or CodeQL and establish defined rules to ensure its safety when executed locally.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Nintendo Switch 2 goes out of stock after record sales
Share link:In this post: Nintendo’s Switch 2 sold more than 3.5 million units in its first four days on sale. Analysts predict Switch 2 sales could top 20 million units in its first year. Initial shortages hit major US retailers, but broader supply looks stronger than in 2017.

BREAKING: Ukraine Drafts Bill to Add Bitcoin to State Reserves
SQDUSDT now launched for futures trading and trading bots
Jito (JTO) Price Surges 20%, Is the $3 Mark on Horizon?
Trending news
MoreCrypto prices
More








