Gate News bot消息,根据Ketman在6月18日报道,一名朝鲜开发人员在Waves Protocol的Keeper-Wallet代码库中获得了更高的权限。
该报告重点介绍了对GitHub上朝鲜活动的例行扫描,发现账户“AhegaoXXX”正在向Keeper-Wallet推送更新。
钱包的存储库在2023年8月之后没有显示任何合法提交,但从2025年5月开始,它们收到了多个依赖项提升。
存储库分析表明,用户可以打开分支、创建版本并发布到节点包管理器(NPM)注册表,从而使操作员完全控制组织。
报告随后将“AhegaoXXX”与朝鲜IT工作者承包团伙联系起来,该团伙此前曾利用自由职业渠道渗透软件项目。
该账户的职责范围已超出简单的维护范围。主Waves协议命名空间内的重定向规则现在指向新启用的Keeper-Wallet命名空间内的相同程序包,这表明内部人员将代码从核心组织移到了钱包项目。
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.