Dossier
secrets
Coverage of secrets in the Nexus archive.
- Another npm supply chain worm is tearing through dev environments
Another npm supply chain attack is spreading through compromised packages, stealing secrets and sensitive data from developers' environments. The attack shares similarities with previous infections linked to the TeamPCP group and references a 'TeamPCP/LiteLLM method' in its payload.
- Web3 hosting backbone Vercel confirms breach as supposed hacker demands $2 million ransom
Vercel, a key Web3 hosting platform, confirmed a security breach where a hacker allegedly demanded $2 million in ransom. The incident raises concerns about exposed secrets from non-sensitive environment variables used by crypto and Web3 projects.