🚀 Gate Square Creator Certification Incentive Program Is Live!
Join Gate Square and share over $10,000 in monthly creator rewards!
Whether you’re an active Gate Square creator or an established voice on another platform, consistent quality content can earn you token rewards, exclusive Gate merch, and massive traffic exposure!
✅ Eligibility:
You can apply if you meet any of the following:
1️⃣ Verified creator on another platform
2️⃣ At least 1,000 followers on a single platform (no combined total)
3️⃣ Gate Square certified creator meeting follower and engagement criteria
Click to apply now 👉
The attack event targeting the NPM Supply Chain has occurred again, with @ctrl/tinycolor releasing a malicious version.
PANews reported on September 16 that Scam Sniffer has detected another attack targeting the NPM Supply Chain. A malicious version of @ctrl/tinycolor (which has a weekly download of 2.2 million times) was released, which runs an information-stealing program during the npm postinstall script execution to scan and steal sensitive data. This malicious payload abused the legitimate sensitive information scanning tool TruffleHog. Please check if you have downloaded the affected version, pause installation/updates, and pin the version to a known safe version.