Unverified50% confidenceFactExact time
The file characteristics accessed by the malicious packages were highly similar to those retrieved by the agent in the previous wiki attack, and the same technical means were used, such as leveraging r.jina.ai for content scraping.
1
Sources
50%
Confidence
Long-term
Relevance
9/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedGIFCT建立了恐怖主义内容的哈希共享联盟数据库，平台可通过比对已知恐怖主义内容的数字指纹来拦截重复传播67% similarUnverifiedIn historical reports on mainstream bug bounty platforms such as HackerOne and Bugcrowd, exposed configuration files and .git directories are among the most frequently rewarded high-value vulnerability types.66% similarUnverifiedSecurity researchers have repeatedly found that popular IDE cracking tools bundle information-stealing trojans (such as RedLine Stealer and Raccoon Stealer) that can extract browser passwords, cryptocurrency wallet private keys, SSH keys, and developer credentials such as AWS Access Keys and GitHub Tokens.66% similarUnverified封装安装包常见的恶意植入手段包括键盘记录器、后台挖矿程序和凭证窃取模块（扫描浏览器Cookie、本地密码管理文件和SSH密钥）64% similarUnverified针对SSH 22端口的自动化扫描攻击者通常使用Mirai等僵尸网络控制感染设备作为跳板，字典攻击凭据来自RockYou、LinkedIn等历次数据泄露事件64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/915782API
curl https://kongchang.com/api/v1/knowledge/claims/915782MCP
get_claim(id=915782)