{ "tag": "infostealer", "name": "Infostealer", "group": "Other", "incidents": [ { "slug": "waterplum-contagious-interview-advisory-sep-2026", "title": "Joint advisory: North Korea's WaterPlum fake-job campaign infected 30,000 devices, hit 7,000+ wallets", "url": "https://drains.watch/i/waterplum-contagious-interview-advisory-sep-2026", "json": "https://drains.watch/i/waterplum-contagious-interview-advisory-sep-2026.json", "status": "live", "severity": "critical", "threatStatus": "active", "verification": "verified", "ai": { "role": "ai-lure", "note": "The attackers reportedly use AI face-swapping software during online job interviews, then turn off their cameras and blame network problems." }, "chains": [ "multi-evm" ], "method": "social-engineering", "product": "Crypto, AI and NFT developers and job seekers", "tags": [ "multi-evm", "social-engineering", "dprk", "waterplum", "contagious-interview", "fake-job-interview", "npm", "vscode", "beavertail", "invisibleferret", "ottercookie", "stoatwaffle", "infostealer", "ai" ], "amountUsd": 10710000, "victims": 7000, "startedAt": "2026-09-18", "closedAt": null, "updatedAt": "2026-10-22T21:53:35.016Z", "summary": "On 18 September 2026 Japanese, US, Australian and German authorities warned that the North Korean group WaterPlum, linked to the 'Contagious Interview' campaign, infected at least 30,000 devices in more than 100 countries between December 2025 and July 2026. Posing as AI, crypto or NFT firms and recruiters, they get targets to run code during fake interviews and coding tests, including malicious npm packages and VS Code projects, then steal private keys, seed phrases and passwords. Funds or credentials were taken from over 7,000 wallets, and more than 1.7 billion yen (about $10.71M) went to North Korea. The advisory does not say the campaign has stopped." }, { "slug": "humanity-protocol-dev-machine-keys-jun-2026", "title": "Humanity Protocol loses $36M after malware on one developer machine exposes hot-wallet and Safe keys", "url": "https://drains.watch/i/humanity-protocol-dev-machine-keys-jun-2026", "json": "https://drains.watch/i/humanity-protocol-dev-machine-keys-jun-2026.json", "status": "closed", "severity": "critical", "threatStatus": "partly-contained", "verification": "verified", "chains": [ "ethereum", "bsc" ], "method": "key-leak", "product": "Humanity Protocol (H token) bridges and treasury", "tags": [ "ethereum", "bsc", "key-leak", "humanity-protocol", "malware", "infostealer", "developer-machine", "gnosis-safe", "multisig", "bridge", "h-token" ], "amountUsd": 36000000, "victims": null, "startedAt": "2026-06-08", "closedAt": "2026-06-15", "updatedAt": "2026-06-15T12:00:00Z", "summary": "On 8 June 2026 an attacker used private keys taken from a single malware-infected developer machine to seize Humanity Protocol's admin hot wallet and its Safe multisigs on Ethereum (three of six keys) and BNB Chain (three of five). They drained about 141M H tokens, used malicious bridge upgrades to mint hundreds of millions more and sold them, a loss of more than $36M; H fell about 89% from its high. The team halted bridge deposits and withdrawals and told users not to touch the bridge or liquidity pools." }, { "slug": "trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026", "title": "TrapDoor packages on npm, PyPI and Crates.io steal wallet data and plant hidden prompts for AI coding tools", "url": "https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026", "json": "https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026.json", "status": "closed", "severity": "high", "threatStatus": "partly-contained", "verification": "verified", "ai": { "role": "agent-target", "note": "The packages planted .cursorrules and CLAUDE.md files with hidden Unicode instructions meant to trick AI coding assistants into running steps that could find and exfiltrate secrets." }, "chains": [ "multi-evm" ], "method": "supply-chain", "product": "Developers installing packages from npm, PyPI and Crates.io", "tags": [ "multi-evm", "supply-chain", "trapdoor", "npm", "pypi", "crates-io", "ai-coding-agent", "cursor", "claude-code", "hidden-unicode", "infostealer", "ai" ], "amountUsd": null, "victims": null, "startedAt": "2026-05-26", "closedAt": "2026-05-26", "updatedAt": "2026-05-26T12:00:00Z", "summary": "Socket reported in late May 2026 a campaign it named TrapDoor: more than 34 malicious packages and 384+ related versions across npm, PyPI and Crates.io that steal crypto wallet data and other developer secrets. The packages also tried to alter files that AI coding tools read, such as .cursorrules and CLAUDE.md, using hidden Unicode instructions meant to get the assistant to run scan-like steps that find and send out secrets. No confirmed losses or victim counts have been published. Developers who installed flagged packages should rotate credentials and move wallet funds." }, { "slug": "notnullosx-mac-stealer-trojanized-ledger-trezor-apr-2026", "title": "notnullOSX Mac stealer swaps Ledger Live and Trezor apps for trojanized copies", "url": "https://drains.watch/i/notnullosx-mac-stealer-trojanized-ledger-trezor-apr-2026", "json": "https://drains.watch/i/notnullosx-mac-stealer-trojanized-ledger-trezor-apr-2026.json", "status": "closed", "severity": "high", "threatStatus": "active", "verification": "verified", "chains": [ "bitcoin", "multi-evm" ], "method": "fake-app", "product": "Mac users with Ledger Live, Trezor Suite or desktop/extension wallets", "tags": [ "bitcoin", "multi-evm", "fake-app", "macos", "infostealer", "ledger", "trezor", "clickfix", "google-ads", "youtube", "moonlock", "notnullosx" ], "amountUsd": null, "victims": null, "startedAt": "2026-04-10", "closedAt": "2026-04-10", "updatedAt": "2026-04-10T12:00:00Z", "summary": "Moonlock found notnullOSX, a macOS stealer spread through Google Ads, promoted YouTube videos and fake wallpaper sites using ClickFix-style 'paste this in Terminal' instructions. Its ReplaceApp module replaces the user's Ledger Live or Trezor app with a trojanized copy to catch the recovery phrase, and it also copies desktop and browser-extension wallet data. Operators reportedly target people holding more than $10,000 in crypto. No loss total was published." }, { "slug": "litellm-pypi-teampcp-credential-wallet-stealer-mar-2026", "title": "Compromised LiteLLM releases on PyPI steal cloud keys and crypto wallet data from AI developers", "url": "https://drains.watch/i/litellm-pypi-teampcp-credential-wallet-stealer-mar-2026", "json": "https://drains.watch/i/litellm-pypi-teampcp-credential-wallet-stealer-mar-2026.json", "status": "closed", "severity": "critical", "threatStatus": "contained", "verification": "verified", "ai": { "role": "agent-target", "note": "The trojanized package was LiteLLM, a gateway library used to connect AI apps and agents to LLMs, so an AI tool was the delivery route; no AI model was manipulated." }, "chains": [ "multi-evm" ], "method": "supply-chain", "product": "LiteLLM on PyPI", "tags": [ "multi-evm", "supply-chain", "litellm", "pypi", "teampcp", "llm-gateway", "ai-tooling", "infostealer", "trivy", "ai" ], "amountUsd": null, "victims": null, "startedAt": "2026-03-24", "closedAt": "2026-03-24", "updatedAt": "2026-03-24T12:00:00Z", "summary": "On 24 March 2026 attackers tracked as TeamPCP published LiteLLM 1.82.7 and 1.82.8 to PyPI with hidden code that runs on import, and in 1.82.8 whenever Python starts. LiteLLM is a popular open-source gateway that AI apps and agents use to reach many LLM providers, with over 3.4 million downloads a day. The payload collected SSH keys, cloud credentials, Kubernetes secrets, .env files and crypto wallet data and sent them to a lookalike domain. Both versions were removed; anyone who installed them should rotate secrets and move funds from wallets on affected machines." }, { "slug": "arkanix-stealer-llm-assisted-crypto-wallets-feb-2026", "title": "Arkanix stealer, likely built with LLM help, targeted crypto wallets before its makers shut it down", "url": "https://drains.watch/i/arkanix-stealer-llm-assisted-crypto-wallets-feb-2026", "json": "https://drains.watch/i/arkanix-stealer-llm-assisted-crypto-wallets-feb-2026.json", "status": "closed", "severity": "low", "threatStatus": "contained", "verification": "verified", "ai": { "role": "ai-malware", "note": "Kaspersky says the stealer contains probable traces of LLM-assisted development and was likely an AI-assisted experiment." }, "chains": [ "multi-evm" ], "method": null, "product": "People infected with the Arkanix stealer (Exodus, Atomic and browser wallet users)", "tags": [ "multi-evm", "infostealer", "malware-as-a-service", "arkanix", "exodus", "atomic-wallet", "llm-assisted", "kaspersky", "discord", "ai" ], "amountUsd": null, "victims": null, "startedAt": "2026-02-24", "closedAt": "2026-02-24", "updatedAt": "2026-02-24T12:00:00Z", "summary": "Kaspersky analysed Arkanix, a malware-as-a-service info-stealer advertised on dark-web forums and Discord from October 2025, as Security Affairs reported on 24 February 2026. It took crypto wallet data, with paid builds offering injection into Exodus and Atomic wallets, along with browser passwords, cookies, Telegram sessions and Discord logins. Kaspersky says the code shows probable traces of LLM-assisted development, and the operators shut the project down about two months after launch. No victim counts or losses were published." }, { "slug": "openclaw-clawhub-malicious-skills-solana-phantom-feb-2026", "title": "Malicious OpenClaw AI-agent skills pose as Solana and Phantom tools to steal wallet keys", "url": "https://drains.watch/i/openclaw-clawhub-malicious-skills-solana-phantom-feb-2026", "json": "https://drains.watch/i/openclaw-clawhub-malicious-skills-solana-phantom-feb-2026.json", "status": "live", "severity": "high", "threatStatus": "partly-contained", "verification": "verified", "ai": { "role": "agent-target", "note": "Malicious skills for the OpenClaw AI agent posed as Solana, Phantom and other crypto tools; some delivered the AMOS stealer and Solana keys were exposed in plain-text keypair files." }, "chains": [ "solana", "multi-evm" ], "method": "supply-chain", "product": "OpenClaw (ClawHub) skill users", "tags": [ "solana", "multi-evm", "supply-chain", "openclaw", "clawhub", "ai-agent", "skills", "amos-stealer", "macos", "infostealer", "phantom", "ai" ], "amountUsd": null, "victims": null, "startedAt": "2026-02-05", "closedAt": null, "updatedAt": "2026-10-22T21:53:35.016Z", "summary": "Bitdefender found that about 17% of the OpenClaw (ClawHub) AI-agent skills it analyzed in the first week of February 2026 behaved maliciously. Solana-themed skills made up 9.3% of the malicious set and Phantom-wallet skills 8.2%. Some skills told users to run fake installers that dropped the AMOS macOS stealer. Solana skills that read SOLANA_KEYPAIR_PATH can expose the plain-text keypair file that holds a wallet's private key. Payloads were staged on 91.92.242[.]30 and an impersonated OpenClaw GitHub repo. Anyone who installed crypto skills and ran their setup commands should move funds to a new wallet." }, { "slug": "nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025", "title": "Compromised Nx npm packages ran victims' AI command-line tools to hunt for wallet and keystore files", "url": "https://drains.watch/i/nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025", "json": "https://drains.watch/i/nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025.json", "status": "closed", "severity": "critical", "threatStatus": "contained", "verification": "verified", "ai": { "role": "ai-malware", "note": "The malware ran locally installed AI CLIs (Claude, Gemini, Amazon Q) to inventory wallet, keystore and secret files for theft; Wiz found the AI step worked in under a quarter of cases and saw no successful crypto exfiltration." }, "chains": [ "multi-evm" ], "method": "supply-chain", "product": "Nx build system on npm", "tags": [ "multi-evm", "supply-chain", "nx", "npm", "s1ngularity", "ai-cli", "claude-code", "gemini-cli", "amazon-q", "keystore", "github-tokens", "github-actions", "infostealer", "wiz", "ai" ], "amountUsd": null, "victims": 1700, "startedAt": "2025-08-26", "closedAt": "2025-09-06", "updatedAt": "2025-09-06T12:00:00Z", "summary": "Around 26 August 2025 malicious versions of Nx, a widely used JavaScript build tool, were published to npm and stole GitHub and npm tokens on install. The malware also looked for installed AI command-line tools (Claude, Gemini and Amazon Q) and ran them to search the disk for crypto wallet and keystore files, .env files and SSH keys, then published the results to repos in the victim's own GitHub account. Wiz counted over 1,700 users with leaked secrets and over 6,700 private repos made public, but saw no successful crypto theft, partly because the AI tools often refused. Anyone who installed the bad versions should rotate tokens and move funds from wallet files on that machine." }, { "slug": "cursor-fake-solidity-extension-500k-crypto-theft-jul-2025", "title": "Fake Solidity extension for the Cursor AI code editor leads to about $500K crypto theft from a developer", "url": "https://drains.watch/i/cursor-fake-solidity-extension-500k-crypto-theft-jul-2025", "json": "https://drains.watch/i/cursor-fake-solidity-extension-500k-crypto-theft-jul-2025.json", "status": "closed", "severity": "high", "threatStatus": "partly-contained", "verification": "verified", "ai": { "role": "agent-target", "note": "The malicious extension reached the victim through the extension marketplace used by Cursor, an AI-powered code editor; the AI features themselves were not exploited." }, "chains": [ "multi-evm" ], "method": "supply-chain", "product": "Cursor AI code editor users (Open VSX extensions)", "tags": [ "multi-evm", "supply-chain", "cursor", "ai-code-editor", "open-vsx", "malicious-extension", "solidity", "screenconnect", "quasar", "infostealer", "developers", "ai" ], "amountUsd": 500000, "victims": 1, "startedAt": "2025-07-10", "closedAt": "2025-07-10", "updatedAt": "2025-07-10T12:00:00Z", "summary": "Kaspersky reported on 10 July 2025 that a blockchain developer lost about $500,000 in crypto after installing a fake Solidity extension in Cursor, an AI code editor built on VS Code that gets extensions from the Open VSX registry. The extension gave no Solidity support; it installed ScreenConnect remote-access software, then the Quasar backdoor and a stealer that took browser, email and wallet data, including seed phrases. The attackers used the seed phrases to drain the developer's wallets. Developers should vet editor extensions and never keep seed phrases or funded keys on a coding machine." }, { "slug": "bluenoroff-deepfake-zoom-crypto-foundation-jun-2025", "title": "North Korea's BlueNoroff used deepfaked executives on a Zoom call to infect a crypto foundation employee's Mac", "url": "https://drains.watch/i/bluenoroff-deepfake-zoom-crypto-foundation-jun-2025", "json": "https://drains.watch/i/bluenoroff-deepfake-zoom-crypto-foundation-jun-2025.json", "status": "closed", "severity": "medium", "threatStatus": "active", "verification": "verified", "ai": { "role": "ai-lure", "note": "Huntress says the Zoom meeting contained several deepfakes of known senior leaders of the victim's company, used to make the call look genuine before the fake 'extension' install." }, "chains": [ "multi-evm" ], "method": "social-engineering", "product": "Crypto foundation staff on macOS", "tags": [ "multi-evm", "social-engineering", "dprk", "bluenoroff", "ta444", "lazarus", "deepfake", "zoom", "fake-meeting", "telegram", "calendly", "macos", "cryptobot", "infostealer", "huntress", "ai" ], "amountUsd": null, "victims": 1, "startedAt": "2025-06-11", "closedAt": "2025-06-18", "updatedAt": "2025-06-18T12:00:00Z", "summary": "Huntress reported on 18 June 2025 that an employee of a cryptocurrency foundation was contacted on Telegram, sent a Calendly invite and led to a fake Zoom domain. Weeks later the employee joined a group call that contained several deepfakes of the company's senior leadership; when 'audio problems' came up, they were told to install a Zoom extension that was really a malicious AppleScript. It installed a set of macOS backdoors, a keylogger and screen recorder, and a crypto-wallet stealer called CryptoBot. Huntress did not say whether funds were stolen." } ], "changes": [ { "incident": "waterplum-contagious-interview-advisory-sep-2026", "incidentTitle": "Joint advisory: North Korea's WaterPlum fake-job campaign infected 30,000 devices, hit 7,000+ wallets", "severity": "critical", "status": "live", "threatStatus": "active", "date": "2026-09-19", "title": "BleepingComputer reported the advisory's figures: 30,000+ infected devices, 7,000+ wallets hit and over 1.7 billion yen stolen.", "sourceUrl": "https://www.bleepingcomputer.com/news/security/north-korean-waterplum-hackers-infected-30-000-devices-worldwide/", "url": "https://drains.watch/i/waterplum-contagious-interview-advisory-sep-2026" }, { "incident": "waterplum-contagious-interview-advisory-sep-2026", "incidentTitle": "Joint advisory: North Korea's WaterPlum fake-job campaign infected 30,000 devices, hit 7,000+ wallets", "severity": "critical", "status": "live", "threatStatus": "active", "date": "2026-09-18", "title": "Japan, the US, Australia and Germany issued a joint advisory on WaterPlum covering activity from December 2025 to July 2026.", "sourceUrl": "https://www.bleepingcomputer.com/news/security/north-korean-waterplum-hackers-infected-30-000-devices-worldwide/", "url": "https://drains.watch/i/waterplum-contagious-interview-advisory-sep-2026" }, { "incident": "humanity-protocol-dev-machine-keys-jun-2026", "incidentTitle": "Humanity Protocol loses $36M after malware on one developer machine exposes hot-wallet and Safe keys", "severity": "critical", "status": "closed", "threatStatus": "partly-contained", "date": "2026-06-15", "title": "Halborn's analysis said malware with root access on a developer computer collected seven keys left there by an accidental backup at mainnet launch; ZachXBT questioned that explanation.", "sourceUrl": "https://www.halborn.com/blog/post/explained-the-humanity-protocol-hack-june-2026", "url": "https://drains.watch/i/humanity-protocol-dev-machine-keys-jun-2026" }, { "incident": "humanity-protocol-dev-machine-keys-jun-2026", "incidentTitle": "Humanity Protocol loses $36M after malware on one developer machine exposes hot-wallet and Safe keys", "severity": "critical", "status": "closed", "threatStatus": "partly-contained", "date": "2026-06-09", "title": "Founder Terence Kwok confirmed the incident; the team halted deposits and withdrawals on the affected bridges as H fell from $0.731 to $0.0796.", "sourceUrl": "https://decrypt.co/370485/humanity-protocol-loses-36m-after-private-keys-compromised-token-crashes-73", "url": "https://drains.watch/i/humanity-protocol-dev-machine-keys-jun-2026" }, { "incident": "humanity-protocol-dev-machine-keys-jun-2026", "incidentTitle": "Humanity Protocol loses $36M after malware on one developer machine exposes hot-wallet and Safe keys", "severity": "critical", "status": "closed", "threatStatus": "partly-contained", "date": "2026-06-08", "title": "Attackers used stolen keys to take over Safe multisigs on Ethereum (3 of 6) and BSC (3 of 5), gained ProxyAdmin control and drained about 141.2M H.", "sourceUrl": "https://decrypt.co/370485/humanity-protocol-loses-36m-after-private-keys-compromised-token-crashes-73", "url": "https://drains.watch/i/humanity-protocol-dev-machine-keys-jun-2026" }, { "incident": "trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026", "incidentTitle": "TrapDoor packages on npm, PyPI and Crates.io steal wallet data and plant hidden prompts for AI coding tools", "severity": "high", "status": "closed", "threatStatus": "partly-contained", "date": "2026-05-26", "title": "CSO Online reported Socket's TrapDoor findings: 34+ malicious packages across three registries that steal wallet data and poison AI assistant config files.", "sourceUrl": "https://www.csoonline.com/article/4177019/trapdoor-malware-campaign-puts-developer-workstations-in-ciso-spotlight.html", "url": "https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026" }, { "incident": "notnullosx-mac-stealer-trojanized-ledger-trezor-apr-2026", "incidentTitle": "notnullOSX Mac stealer swaps Ledger Live and Trezor apps for trojanized copies", "severity": "high", "status": "closed", "threatStatus": "active", "date": "2026-04-10", "title": "Moonlock publishes its analysis of notnullOSX, including the module that swaps hardware-wallet apps for trojanized copies.", "sourceUrl": "https://moonlock.com/new-mac-stealer-notnullosx", "url": "https://drains.watch/i/notnullosx-mac-stealer-trojanized-ledger-trezor-apr-2026" }, { "incident": "litellm-pypi-teampcp-credential-wallet-stealer-mar-2026", "incidentTitle": "Compromised LiteLLM releases on PyPI steal cloud keys and crypto wallet data from AI developers", "severity": "critical", "status": "closed", "threatStatus": "contained", "date": "2026-03-24", "title": "Malicious LiteLLM 1.82.7 and 1.82.8 were published to PyPI with a credential and wallet stealer, and were later removed.", "sourceUrl": "https://www.bleepingcomputer.com/news/security/popular-litellm-pypi-package-compromised-in-teampcp-supply-chain-attack/", "url": "https://drains.watch/i/litellm-pypi-teampcp-credential-wallet-stealer-mar-2026" }, { "incident": "arkanix-stealer-llm-assisted-crypto-wallets-feb-2026", "incidentTitle": "Arkanix stealer, likely built with LLM help, targeted crypto wallets before its makers shut it down", "severity": "low", "status": "closed", "threatStatus": "contained", "date": "2026-02-24", "title": "Security Affairs reported Kaspersky's analysis of Arkanix and the project's shutdown.", "sourceUrl": "https://securityaffairs.com/188431/malware/arkanix-stealer-ai-assisted-info-stealer-shuts-down-after-brief-campaign.html", "url": "https://drains.watch/i/arkanix-stealer-llm-assisted-crypto-wallets-feb-2026" }, { "incident": "openclaw-clawhub-malicious-skills-solana-phantom-feb-2026", "incidentTitle": "Malicious OpenClaw AI-agent skills pose as Solana and Phantom tools to steal wallet keys", "severity": "high", "status": "live", "threatStatus": "partly-contained", "date": "2026-02-05", "title": "Bitdefender Labs published its analysis of malicious OpenClaw skills, including Solana- and Phantom-themed lures that delivered the AMOS stealer.", "sourceUrl": "https://www.bitdefender.com/en-au/blog/labs/helpful-skills-or-hidden-payloads-bitdefender-labs-dives-deep-into-the-openclaw-malicious-skill-trap", "url": "https://drains.watch/i/openclaw-clawhub-malicious-skills-solana-phantom-feb-2026" }, { "incident": "nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025", "incidentTitle": "Compromised Nx npm packages ran victims' AI command-line tools to hunt for wallet and keystore files", "severity": "critical", "status": "closed", "threatStatus": "contained", "date": "2025-09-06", "title": "BleepingComputer reported Wiz's tally of 2,180 exposed accounts and 7,200 repositories across three phases.", "sourceUrl": "https://www.bleepingcomputer.com/news/security/ai-powered-malware-hit-2-180-github-accounts-in-s1ngularity-attack/", "url": "https://drains.watch/i/nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025" }, { "incident": "nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025", "incidentTitle": "Compromised Nx npm packages ran victims' AI command-line tools to hunt for wallet and keystore files", "severity": "critical", "status": "closed", "threatStatus": "contained", "date": "2025-09-03", "title": "Wiz published its analysis: over 1,700 users had secrets leaked, over 6,700 private repos were exposed, and no successful crypto exfiltration had been seen.", "sourceUrl": "https://www.wiz.io/blog/s1ngularitys-aftermath", "url": "https://drains.watch/i/nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025" }, { "incident": "nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025", "incidentTitle": "Compromised Nx npm packages ran victims' AI command-line tools to hunt for wallet and keystore files", "severity": "critical", "status": "closed", "threatStatus": "contained", "date": "2025-08-26", "title": "News broke that malicious Nx versions on npm were stealing tokens and using local AI CLIs to search for wallet and secret files.", "sourceUrl": "https://www.wiz.io/blog/s1ngularitys-aftermath", "url": "https://drains.watch/i/nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025" }, { "incident": "nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025", "incidentTitle": "Compromised Nx npm packages ran victims' AI command-line tools to hunt for wallet and keystore files", "severity": "critical", "status": "closed", "threatStatus": "contained", "date": "2025-08-26", "title": "Malicious Nx versions with a data-stealing postinstall script were published to npm.", "sourceUrl": "https://www.bleepingcomputer.com/news/security/ai-powered-malware-hit-2-180-github-accounts-in-s1ngularity-attack/", "url": "https://drains.watch/i/nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025" }, { "incident": "cursor-fake-solidity-extension-500k-crypto-theft-jul-2025", "incidentTitle": "Fake Solidity extension for the Cursor AI code editor leads to about $500K crypto theft from a developer", "severity": "high", "status": "closed", "threatStatus": "partly-contained", "date": "2025-07-10", "title": "Kaspersky disclosed that a fake Solidity extension aimed at Cursor users led to about $500,000 in stolen crypto from a blockchain developer.", "sourceUrl": "https://www.kaspersky.com/about/press-releases/kaspersky-uncovers-500k-crypto-heist-through-malicious-packages-targeting-cursor-developers", "url": "https://drains.watch/i/cursor-fake-solidity-extension-500k-crypto-theft-jul-2025" }, { "incident": "bluenoroff-deepfake-zoom-crypto-foundation-jun-2025", "incidentTitle": "North Korea's BlueNoroff used deepfaked executives on a Zoom call to infect a crypto foundation employee's Mac", "severity": "medium", "status": "closed", "threatStatus": "active", "date": "2025-06-18", "title": "Huntress published its analysis, attributing the attack to BlueNoroff (TA444).", "sourceUrl": "https://www.huntress.com/blog/inside-bluenoroff-web3-intrusion-analysis", "url": "https://drains.watch/i/bluenoroff-deepfake-zoom-crypto-foundation-jun-2025" }, { "incident": "bluenoroff-deepfake-zoom-crypto-foundation-jun-2025", "incidentTitle": "North Korea's BlueNoroff used deepfaked executives on a Zoom call to infect a crypto foundation employee's Mac", "severity": "medium", "status": "closed", "threatStatus": "active", "date": "2025-06-11", "title": "Huntress was contacted about the intrusion on the employee's Mac.", "sourceUrl": "https://www.huntress.com/blog/inside-bluenoroff-web3-intrusion-analysis", "url": "https://drains.watch/i/bluenoroff-deepfake-zoom-crypto-foundation-jun-2025" } ] }