与「Hades」相关的搜索结果

吴说获悉，慢雾安全团队发布预警称，npm 生态系统中出现与被盗开发者账户 czirker 相关联的新型恶意软件变种（Shai-Hulud / Miasma / Hades）。攻击者通过预配置的 binding.gyp 文件在执行 npm install 过程中触发恶意代码。目前确认受影响的软件包共 23 个，其中 leo-logger 每周下载量达 3140 次；同时发现 408 个包含被盗凭据的 GitHub 仓库。攻击行为涉及窃取 GitHub 及 npm token、云端凭证（AWS / GCP / Azure）、本地环境数据及滥用 GitHub Actions 等。慢雾建议安全团队立即检查锁定文件与软件包记录，移除相关包并轮换所有关键密钥，同时强制启用双因素身份验证（2FA）。

🚨 SlowMist TI Alert 🚨 A new Shai-Hulud / Miasma / Hades npm malware variant linked to the compromised npm developer account czirker, affecting the npm ecosystem. The campaign uses a preconfigured binding.gyp file to execute during npm install; reported scope includes 23 affected packages, with leo-logger noted at 3,140 weekly npm downloads. As of the tweet publication time, 408 infected GitHub repositories containing stolen credentials had already been observed. Potential attacker actions include GitHub token theft, npm token theft, AWS / GCP / Azure credential theft, local environment data exfiltration, malicious GitHub workflow abuse, and further npm supply-chain propagation. Security teams should immediately check lockfiles and package histories for affected versions, downgrade or remove impacted packages, rotate npm, GitHub, cloud, CI/CD, and application secrets, enforce 2FA. Thanks to @OX__Security for the excellent analysis. As always, stay vigilant! The following URL can be used to track the latest situation:

A fan mod for Hades 2 called Zagreus’ Journey, created by NikkelM, fully integrates the original Hades game’s biomes, enemies, bosses, and encounters. Players experience these as Melinoë using her updated abilities from the sequel. Supergiant Games praised it: “We’re blown away by this user-created mod for the PC version of Hades II, which lets you play through the original game’s encounters as Melinoë!” The mod adds new resources, prophecies, cosmetics, Chaos Trials, and tracks from the original soundtrack. NikkelM stated: “This mod does not, and never will, use generative AI for any art, voice, or music.”