Unverified50% confidenceReleaseExact time
The package @nibvok-llc/nibvok-ai-security has been listed on the ClawHub registry.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/12/2026
First Seen
Valid until: 1/10/2027
Sources
Related Entities
Related Claims
UnverifiedThe commit hash for langchain-core 1.6.9 is fc7dc77, signed using GitHub's verified signature mechanism (GPG key ID: B5690EEEBB952194).53% similarVerifiedThe Hugging Face platform has deployed a security.txt file, accessible at https://huggingface.co/security.txt.53% similarUnverified攻击载荷会扫描 .npmrc 中的 npm 认证令牌、AWS/GCP/Azure 云凭证、环境变量中的密钥以及 CI/CD 部署密钥52% similarUnverified封装安装包常见的恶意植入手段包括键盘记录器、后台挖矿程序和凭证窃取模块(扫描浏览器Cookie、本地密码管理文件和SSH密钥)51% similarVerifiedIn 2017, the WannaCry ransomware exploited EternalBlue, a Windows vulnerability tool secretly stockpiled by the NSA that had been leaked50% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1004827API
curl https://kongchang.com/api/v1/knowledge/claims/1004827MCP
get_claim(id=1004827)