Apifox desktop client suffers from a supply chain attack, malicious code can steal credentials and execute commands remotely
By: www.chaincatcher.com|2026/03/26 06:00:04
0
Share
Prefer us on Google
According to Slow Fog monitoring, the Apifox desktop client has encountered a supply chain attack, with front-end script files hosted on its official CDN being injected with highly obfuscated malicious JavaScript code.
Affected users may face risks such as credential theft, sensitive data leakage, and remote command execution, with the malicious code executing automatically and being highly concealed. Slow Fog recommends that users immediately revoke all Tokens, reset passwords, log out and log back in to invalidate sessions, block the *.apifox.it.com domain, clear local storage, and review API logs and abnormal activities.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
Anthropic Launches Free Platform Claude Academy
Ukrainians Abroad Can Obtain an Electronic Taxpayer Card with QR Code
Lingguang App Launches One-Click Deployment Feature Supporting Multiple AI Applications
Qubic GitHub Account Compromised, Wallet Users Must Migrate Immediately
Google Launches AlphaEvolve AI Code Optimization Agent
Slow fog warning, over 140 Mastra npm packages suffered supply chain attacks
Slow Fog stated that over 140 Mastra-related npm packages were subjected to a supply chain attack, with the affected versions introducing the malicious dependency easy-day-js@1.11.22, triggering code execution controlled by the attacker during the installation phase.
The Hang Seng Hong Kong-Mainland Technology Index will include SpaceX
The Hang Seng Index Company announced that SpaceX will be listed on June 12, 2026. Therefore, the calculation method for the Hang Seng Tech Index will add Space Exploration Technologies Corp. ("SpaceX", stock code: SPCX.O) to the designated U.S. component stock list (currently: the seven tech giants...
Grayscale plans to launch a Hyperliquid staking ETF with management fees lower than Bitwise and 21Shares
Grayscale submitted its S-1 amendment for the Hyperliquid Staking ETF, proposing to set the fund management fee at 0.29%, with the code HYPG. This rate is lower than similar products already launched by Bitwise and 21Shares. Among them, Bitwise's BHYP has a first-month fee rate of 0%, followed by 0....
Vitalik updates on CROPS AI progress: proposes combining private remote LLM calls with Ethereum private RPC reads
Vitalik Buterin updated on several CROPS AI related developments and pointed out that there is a clear intersection between the "CROPS Ethereum access layer" and "CROPS AI." He stated that if remote large language models could be called for payment through zero-knowledge proofs, it could also be use...
Argentina's anti-gambling bill for the first time includes cryptocurrency exchanges under regulation, with violations punishable by 2 to 4 years in prison
According to CriptoNoticias, the Argentine government submitted a bill to Congress through the Ministry of Health aimed at preventing gambling addiction and regulating online gambling, which for the first time explicitly includes virtual asset service providers within the regulatory scope. The bill ...
UK AI agency security and governance platform Geordie AI completes $30 million Series A funding, led by Balderton Capital
According to Fortune magazine, the UK AI agent security and governance platform Geordie AI has completed a $30 million Series A funding round, led by Balderton Capital, with participation from Crosspoint Capital, and additional investments from General Catalyst and Ten Eleven Ventures, resulting in ...
The smart DeFi assistant Otomato has completed a $2 million financing round, led by Improbable
According to official news, the smart DeFi assistant Otomato announced the completion of a $2 million financing led by Improbable. Otomato is a no-code Web3 automation protocol and DeFi assistant that allows users to create, monitor, and automate on-chain operations, with over 3,000 users currently.
DeFi has reached its most dangerous moment: the real vulnerabilities are not in the code
April 2026 is not just a security crisis; it is the moment when the industry's mental model completely collapses, and it is also the moment when the protocols that can survive are distinguished from those that cannot.
Alipay has launched AI wallet products and Token Pay, and its AI payment now supports 95% of general intelligent agent frameworks
According to reports from the Mobile Payment Network, Alipay announced that "AI Payment" has completed 300 million AI intelligent agent payments and supports 95% of general intelligent agent frameworks, becoming the world's first large-scale commercial AI native payment infrastructure. At the same t...
GitHub is suspected to have been hacked and is investigating an incident of unauthorized access to its internal code repository
GitHub has officially stated that it is investigating an unauthorized access incident involving its internal code repository. GitHub claims that there is currently no evidence to suggest that customer data stored in enterprise, organization, or code repositories outside the GitHub platform has been ...
Zhao Changpeng reminds about the GitHub security incident, API Keys in private repositories should be reviewed and replaced immediately
In response to the unauthorized access event of the internal code repository disclosed by GitHub, Zhao Changpeng reminded, "If the code contains an API Key, even if it is in a private repository, it should be reviewed and replaced immediately."
Morning News | VanEck and Grayscale submitted BNB ETF amendments on the same day; BlackRock discusses investing billions of dollars in SpaceX's IPO; Michael Saylor releases Bitcoin Tracker information again
Overview of Important Market Events on May 17
T Rowe submitted the third revised document for the Active Crypto ETF
According to Bloomberg ETF analyst Eric Balchunas, T Rowe has submitted a third revised filing for the Active Crypto ETF, with the trading code $ TOKN and a fee rate of 75 basis points. According to its disclosure, the product may be launched soon.Eric Balchunas noted that it is worth paying attenti...
The Smarter Web Company increased its holdings by 44 BTC, with a total holding of 2750 BTC
The UK-listed company The Smarter Web Company with the code SWC has purchased an additional 44 bitcoins, bringing its total holdings to 2,750 bitcoins. The company ranks 27th in the Bitcoin 100 list.
Slow Fog: HexagonalRodent is targeting Web3 developers with attacks
The Chief Information Security Officer of Slow Fog, 23pds, tweeted that HexagonalRodent, a subsidiary of the Lazarus Group, is targeting Web3 developers through social engineering tactics such as "high-paying remote positions" and "recruitment for well-known projects" to induce the execution of mali...
Warning, version 1.14.1 of the npm core package axios is experiencing an active supply chain attack
According to market news, Socket has detected that version 1.14.1 of the npm core package axios is experiencing an active supply chain attack. The attacker injected a malicious dependency package to implant malicious code into axios. Developers using axios are advised to immediately pin the version ...
WeChat launches official lobster plugin
According to Tencent's public account, WeChat has officially launched the WeChat "ClawBot" plugin, supporting the integration of OpenClaw. Users can scan a QR code or copy a command to connect OpenClaw to WeChat. Once connected, users can quickly interact with their "lobster" efficiently through WeC...
Holdstation suffered a hacker attack, losing 462,000 USDT. Services have been suspended and a full compensation has been promised
According to GoPlus monitoring, the account abstraction solution Holdstation suffered a supply chain attack, where the attacker stole developer session tokens, bypassed two-factor authentication, and injected malicious code into application updates, resulting in the theft of user funds.The attack re...
Backpack announces token code "BP" and contract address
Backpack officially announced its token code "BP" on social media and published the contract address.
The China Academy of Information and Communications Technology collaborates with universities to discover and fix the high-risk command injection vulnerability in OpenClaw
The China Academy of Information and Communications Technology, in collaboration with Shanghai Jiao Tong University and Nanjing University, discovered a high-risk vulnerability driven by LLM command injection in the bash-tools module of the open-source autonomous intelligent agent framework OpenClaw...
The listed company UTime plans to acquire the Web3 data platform "Fei Xiao Hao" for 80 million USD
Nasdaq-listed company UTime Limited (stock code: WTO) announced the signing of a non-binding letter of intent to acquire 100% equity of Feixiaohao Technology Inc., the operator of "Feixiaohao," for up to $80 million. The transaction structure includes $64 million in stock consideration (common stock...
Slow Fog: ClawHub developers please be aware of phishing and credential leakage risks
The Chief Information Security Officer of Slow Fog Technology, 23pds, issued a reminder stating that ClawHub developers should be aware of phishing and credential leakage risks. Currently, ClawHub relies on developers' GitHub one-click login. Previously, the Sha1-Hulud worm stole a large number of d...
Grayscale Avalanche Staking ETF will begin trading tomorrow
According to official news from Grayscale, the Grayscale Avalanche Staking ETF (stock code: GAVA) will begin trading tomorrow, providing investors with direct exposure to AVAX.
Nanjing Qixia District and Jiangning District issued a "Crayfish Farming" policy
Nanjing Qixia District issued "Several Measures to Support the Integration Development of OpenClaw and Other Open Source AI Intelligent Tools with OPC." It mentions that, relying on the Qizhi OPC Cloud Platform, it will provide free deployment services and supporting development toolkits for OpenCla...
Claude announced the launch of the Code Review feature, where the AI agent automatically conducts code reviews
Claude announced the launch of the new feature Claude Code Code Review. When a Pull Request (PR) is created, Claude sends a group of AI agents to simultaneously search for potential code vulnerabilities.The agents search for vulnerabilities in parallel, validate each vulnerability to reduce false po...
Anthropic Launches Free Platform Claude Academy
Ukrainians Abroad Can Obtain an Electronic Taxpayer Card with QR Code
Lingguang App Launches One-Click Deployment Feature Supporting Multiple AI Applications
Qubic GitHub Account Compromised, Wallet Users Must Migrate Immediately
Google Launches AlphaEvolve AI Code Optimization Agent
Slow fog warning, over 140 Mastra npm packages suffered supply chain attacks
Slow Fog stated that over 140 Mastra-related npm packages were subjected to a supply chain attack, with the affected versions introducing the malicious dependency easy-day-js@1.11.22, triggering code execution controlled by the attacker during the installation phase.
...
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
