Scan to download
BTC $60,750.55 -2.27%
ETH $1,554.95 -6.49%
BNB $573.10 -3.00%
XRP $1.08 -3.29%
SOL $62.38 -5.35%
TRX $0.3192 -1.94%
DOGE $0.0812 -3.00%
ADA $0.1555 -4.53%
BCH $217.32 -2.64%
LINK $7.31 -3.25%
HYPE $59.21 -4.57%
AAVE $61.19 -6.86%
SUI $0.7003 -1.76%
XLM $0.1985 +4.56%
ZEC $359.25 +17.41%
BTC $60,750.55 -2.27%
ETH $1,554.95 -6.49%
BNB $573.10 -3.00%
XRP $1.08 -3.29%
SOL $62.38 -5.35%
TRX $0.3192 -1.94%
DOGE $0.0812 -3.00%
ADA $0.1555 -4.53%
BCH $217.32 -2.64%
LINK $7.31 -3.25%
HYPE $59.21 -4.57%
AAVE $61.19 -6.86%
SUI $0.7003 -1.76%
XLM $0.1985 +4.56%
ZEC $359.25 +17.41%

sand

The security incidents at GitHub and Grafana are likely related to a large-scale "mini sandworm" supply chain attack

According to the threat intelligence released by Slow Fog, several high-frequency npm packages including AntV and Echarts-for-react, as well as the Python SDK durabletask, have recently been targeted by the Mini Shai-Hulud "mini sandworm" supply chain attack. The npm account atool was compromised, and the attacker automatically published 637 malicious versions within 22 minutes, affecting 317 packages. The attacker continuously uploaded durabletask versions 1.4.1, 1.4.2, and 1.4.3 within 35 minutes, bypassing normal release controls and impersonating an official Microsoft release.The large-scale leak of GitHub tokens and the ransomware attack on Grafana Labs are likely related to this supply chain attack. Affected components include high-frequency components such as AntV and Echarts-for-react in the npm ecosystem, as well as Python packages durabletask 1.4.1, 1.4.2, and 1.4.3. Attackers can steal cloud and local credentials, gain unauthorized access to internal repositories and sensitive cloud infrastructure, move laterally to developer machines and CI/CD pipelines, sell and exploit leaked GitHub tokens, and implement ransom and data leak threats.Slow Fog recommends immediately rotating all exposed credentials, replacing affected packages, isolating potentially infected systems, and implementing strict dependency review policies. Previously, it was reported that the "mini sandworm" worm had recently completed widespread infection in open-source code repositories, and developers should be vigilant in checking for issues.

On the first day of the Victoria Harbour special exhibition, the number of visitors exceeded ten thousand, and the on-site viewing enthusiasm surged

Gate's outdoor crossover exhibition "Racing the Future" officially opened at the K11 MUSEA waterfront promenade in Victoria Harbour, Hong Kong. On the opening day, the event attracted a large number of citizens and tourists, with attendance exceeding ten thousand, and the waterfront area remained crowded, creating a lively atmosphere.As the official sponsor of the F1 Red Bull Racing team, Gate showcased the team's brand new 2026 racing car and related equipment at this exhibition, and set up an interactive experience area to attract visitors to closely experience the combination of racing engineering and speed culture. Many visitors stopped to take photos and engage with the interactive content. The racing suits, equipment, and gloves of champion driver Max Verstappen and driver Isack Hadjar were also on display, along with a giant driver helmet installation of Max Verstappen, drawing many fans to the event.In addition, Gate will hold the "Gate 13 Blue Carpet Ceremony" on April 20, where the unveiling of the F1 Red Bull Racing team's display car and brand collaboration will take place; that evening, Gate will also host a high-end anniversary dinner at the Rosewood Hong Kong, with platform founder and CEO Dr. Han in attendance, and over 300 representatives from top industry institutions and partners expected to participate in the exchange.
app_icon
ChainCatcher Building the Web3 world with innovations.