npm 蠕虫被释放：SANDWORM_MODE 利用开发环境，窃取加密密钥和 AI 秘密

一种新的 npm 蠕虫 SANDWORM_MODE 正在积极瞄准开发人员环境，获取私钥、加密资产和 AI API 密钥。了解不断变化的威胁形势。

npm Worm Unleashed: SANDWORM_MODE Exploits Dev Environments, Steals Crypto Keys and AI Secrets

npm 蠕虫被释放：SANDWORM_MODE 利用开发环境，窃取加密密钥和 AI 秘密

In a startling development for the software development community, a sophisticated npm worm, dubbed SANDWORM_MODE, has been discovered actively compromising developer environments. This self-replicating malware has infiltrated at least 19 malicious npm packages, with a primary objective of harvesting sensitive information, including private keys, cryptocurrency wallet details, and crucial AI API keys.

在软件开发社区的一次惊人的发展中，人们发现了一种名为 SANDWORM_MODE 的复杂 npm 蠕虫，它正在积极危害开发人员环境。这种自我复制的恶意软件已渗透到至少 19 个恶意 npm 软件包，其主要目标是收集敏感信息，包括私钥、加密货币钱包详细信息和关键的 AI API 密钥。

The SANDWORM_MODE Attack: A Multi-Pronged Assault

SANDWORM_MODE 攻击：多管齐下的攻击

Uncovered by Socket's Threat Research Team, SANDWORM_MODE represents a significant escalation in supply chain attacks. Unlike previous threats, this worm operates with alarming speed and stealth. Its first stage executes immediately upon package import, focusing on exfiltrating npm tokens, GitHub tokens, environment secrets, and various forms of crypto keys. This includes BIP39 mnemonics, Ethereum private keys, Solana byte arrays, and Bitcoin WIF keys, all sent to a dedicated drain endpoint before any other payload can be triggered.

SANDWORM_MODE 由 Socket 的威胁研究团队发现，代表着供应链攻击的显着升级。与以前的威胁不同，该蠕虫的运行速度惊人且隐蔽。它的第一阶段在包导入后立即执行，重点是泄露 npm 令牌、GitHub 令牌、环境机密和各种形式的加密密钥。这包括 BIP39 助记符、以太坊私钥、Solana 字节数组和比特币 WIF 密钥，所有这些都在触发任何其他负载之前发送到专用的耗尽端点。

Beyond Crypto: Targeting AI and Developer Secrets

超越加密：瞄准人工智能和开发者秘密

The worm's malicious capabilities extend beyond cryptocurrency theft. It actively injects malicious GitHub workflows and poisons AI toolchains. Several packages impersonate AI coding tools, embedding rogue servers into popular AI assistant configurations. These rogue servers are designed to stealthily prompt AI assistants to exfiltrate SSH keys, AWS credentials, npm tokens, and other environment secrets, all while preventing the AI from notifying the user. Furthermore, the worm targets API keys from major LLM providers, including OpenAI, Anthropic, and Google, by searching environment variables and .env files.

该蠕虫病毒的恶意功能超出了加密货币盗窃的范围。它主动注入恶意 GitHub 工作流程并毒害 AI 工具链。多个软件包冒充人工智能编码工具，将恶意服务器嵌入到流行的人工智能助手配置中。这些恶意服务器旨在秘密提示 AI 助手窃取 SSH 密钥、AWS 凭证、npm 令牌和其他环境机密，同时阻止 AI 通知用户。此外，该蠕虫通过搜索环境变量和 .env 文件，以主要 LLM 提供商（包括 OpenAI、Anthropic 和 Google）的 API 密钥为目标。

Evolving Threat Landscape and Mitigation

不断变化的威胁形势和缓解措施

While npm, GitHub, and Cloudflare have taken action to remove the malicious packages and infrastructure, the threat necessitates immediate action from developers. Any environment that has run these packages should be treated as compromised. Key mitigation steps include rotating all npm and GitHub tokens, auditing CI/CD workflows for suspicious additions, and reviewing AI assistant configurations. The worm's design, which includes a dormant polymorphic engine and a disabled "dead switch" capable of shredding files, indicates that future variants could be even more sophisticated and evasive.

虽然 npm、GitHub 和 Cloudflare 已采取行动删除恶意软件包和基础设施，但开发人员必须立即采取行动应对威胁。任何运行这些软件包的环境都应被视为受到威胁。关键缓解步骤包括轮换所有 npm 和 GitHub 令牌、审核 CI/CD 工作流程中是否存在可疑添加，以及审查 AI 助手配置。该蠕虫的设计包括休眠的多态引擎和能够粉碎文件的禁用“死开关”，这表明未来的变种可能会更加复杂和隐蔽。

A Broader Context: Keys, Bots, and AI Governance

更广泛的背景：密钥、机器人和人工智能治理

This incident underscores a broader debate about control and security in the digital realm, particularly concerning AI. As articulated by crypto investor Balaji Srinivasan, "whoever controls the keys controls the machines." While current AI systems still rely on humans for goal-setting, the potential for AI to gain more autonomy raises questions about governance. Blockchain-based cryptography and private keys are emerging as potential mechanisms for securing AI agents and ensuring they remain aligned with human-defined objectives. The SANDWORM_MODE attack, by focusing on the theft of private keys and API credentials, serves as a stark, albeit malicious, demonstration of the critical importance of securing these digital assets.

这一事件凸显了有关数字领域控制和安全的更广泛争论，特别是有关人工智能的争论。正如加密货币投资者巴拉吉·斯里尼瓦桑（Balaji Srinivasan）所说，“谁控制了密钥，谁就控制了机器。”虽然当前的人工智能系统仍然依赖人类来设定目标，但人工智能获得更多自主权的潜力引发了有关治理的问题。基于区块链的密码学和私钥正在成为保护人工智能代理并确保它们与人类定义的目标保持一致的潜在机制。 SANDWORM_MODE 攻击重点关注私钥和 API 凭证的盗窃，尽管是恶意的，但它清楚地证明了保护这些数字资产的至关重要性。

Looking Ahead

展望未来

The interconnectedness of software supply chains, cryptocurrency, and AI means that security threats are becoming increasingly complex. Vigilance and proactive security measures are paramount for developers and organizations alike. So, let's all keep our digital doors locked and our keys safe – happy coding!

软件供应链、加密货币和人工智能的互联性意味着安全威胁变得越来越复杂。对于开发人员和组织来说，保持警惕和主动的安全措施至关重要。所以，让我们都锁好我们的数字门并确保我们的钥匙安全——快乐编码！