{"id":2165,"date":"2025-09-09T01:55:26","date_gmt":"2025-09-09T01:55:26","guid":{"rendered":"https:\/\/bitcoinnewscrypto.com\/ko\/?p=2165"},"modified":"2025-09-09T01:55:26","modified_gmt":"2025-09-09T01:55:26","slug":"crypto-supply-chain-attack-npm-malware","status":"publish","type":"post","link":"https:\/\/bitcoinnewscrypto.com\/ko\/news\/solana\/crypto-supply-chain-attack-npm-malware\/","title":{"rendered":"\ud83d\udea8\uc554\ud638\ud654\ud3d0 \ub300\ub7c9 \ud0c8\ucde8! npm \uacf5\uae09\ub9dd \uacf5\uaca9 \ubc1c\uc0dd!\ud83d\udea8"},"content":{"rendered":"

\uc0c8\ub85c\uc6b4 \uc0ac\uc774\ubc84 \uacf5\uaca9\uc774 \uc0ac\uc6a9\uc790\uac00 \uac70\ub798\ub97c \ubcf4\ub0bc \ub54c \uc554\ud638 \ud654\ud3d0\ub97c \ud6d4\uce58\uace0 \uc788\uc73c\uba70, \ub9ce\uc740 \uc804\ubb38\uac00\ub4e4\uc740 \uc774\ub97c \uc5ed\uc0ac\uc0c1 \uac00\uc7a5 \ud070 \uacf5\uae09\ub9dd \uacf5\uaca9\uc774\ub77c\uace0 \ubd80\ub985\ub2c8\ub2e4. \ud574\ucee4\ub294 \ud53c\uc2f1 \uc774\uba54\uc77c\uc744 \uc0ac\uc6a9\ud558\uc5ec npm \ud328\ud0a4\uc9c0 \uc720\uc9c0 \uad00\ub9ac\uc790 \uacc4\uc815\uc744 \ud574\ud0b9\ud588\uc2b5\ub2c8\ub2e4. \uc774 \uc774\uba54\uc77c\uc740 \uc2e4\uc81c npm \ub808\uc9c0\uc2a4\ud2b8\ub9ac\ub97c \ubcf5\uc0ac\ud558\ub294 “support@npmjs.help<\/a>“\uc5d0\uc11c \uc628 \uac83\ucc98\ub7fc \ubcf4\uc600\uc2b5\ub2c8\ub2e4. \uba54\uc2dc\uc9c0\ub294 \uac1c\ubc1c\uc790\uc5d0\uac8c 2\ub2e8\uacc4 \uc778\uc99d\uc744 \uc5c5\ub370\uc774\ud2b8\ud558\uc9c0 \uc54a\uc73c\uba74 \uacc4\uc815\uc774 \uc7a0\uae38 \uac83\uc774\ub77c\uace0 \ub9d0\ud588\uc2b5\ub2c8\ub2e4. \uc720\uc9c0 \uad00\ub9ac\uc790\uac00 \ub9c1\ud06c\ub97c \ud074\ub9ad\ud558\uba74 \uacf5\uaca9\uc790\ub294 \ub85c\uadf8\uc778 \uc138\ubd80 \uc815\ubcf4\ub97c \uc5bb\uc5b4 \uc778\uae30 \uc788\ub294 npm \ud328\ud0a4\uc9c0 \ub0b4\ubd80\uc5d0 \uba40\uc6e8\uc5b4\ub97c \ubc30\uce58\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n\n

chalk, debug, ansi-styles\ub97c \ud3ec\ud568\ud558\uc5ec \ub110\ub9ac \uc0ac\uc6a9\ub418\ub294 18\uac1c\uc758 JavaScript \ub77c\uc774\ube0c\ub7ec\ub9ac\uac00 \uc190\uc0c1\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud328\ud0a4\uc9c0\ub294 \ub9e4\uc8fc \uc218\uc2ed\uc5b5 \ubc88 \ub2e4\uc6b4\ub85c\ub4dc\ub418\uba70 \uc804 \uc138\uacc4 \uac1c\ubc1c\uc790\uac00 \uc0ac\uc6a9\ud569\ub2c8\ub2e4. \uc989, \uc804\uccb4 JavaScript \uc0dd\ud0dc\uacc4\uac00 \ub178\ucd9c\ub418\uc5c8\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. BleepingComputer\ub294 \uacf5\uaca9\uc790\uac00 \ube0c\ub77c\uc6b0\uc800 \uae30\ubc18 \uc778\ud130\uc149\ud130\ucc98\ub7fc \uc791\ub3d9\ud558\ub294 \ucf54\ub4dc\ub97c \uc774\ub7ec\ud55c \ub77c\uc774\ube0c\ub7ec\ub9ac\uc5d0 \uc8fc\uc785\ud588\ub2e4\uace0 \ubcf4\uace0\ud588\uc2b5\ub2c8\ub2e4. \uc774 \ucf54\ub4dc\ub294 \ub124\ud2b8\uc6cc\ud06c \ud2b8\ub798\ud53d\uc744 \uac10\uc2dc\ud558\uace0 Bitcoin, Ethereum, Solana, Tron, Litecoin \ubc0f Bitcoin Cash\uc5d0\uc11c \uc554\ud638 \ud654\ud3d0 \uac70\ub798\ub97c \uac80\uc0c9\ud588\uc2b5\ub2c8\ub2e4. \ub204\uad70\uac00 \uc804\uc1a1\uc744 \ubcf4\ub0bc \ub54c \uba40\uc6e8\uc5b4\ub294 \uac70\ub798\uac00 \uc11c\uba85\ub418\uae30 \uc804\uc5d0 \uc2e4\uc81c \uc9c0\uac11 \uc8fc\uc18c\ub97c \ud574\ucee4\uac00 \uc81c\uc5b4\ud558\ub294 \uc8fc\uc18c\ub85c \ub300\uccb4\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n\n

\ubcf4\uc548 \uc5f0\uad6c\uc6d0 Charlie Eriksen\uc740 \uba40\uc6e8\uc5b4\uac00 \uc5ec\ub7ec \ubc29\uc2dd\uc73c\ub85c \uc791\ub3d9\ud55c\ub2e4\uace0 \uc124\uba85\ud588\uc2b5\ub2c8\ub2e4. \uc6f9\uc0ac\uc774\ud2b8\uc5d0 \ud45c\uc2dc\ub418\ub294 \ub0b4\uc6a9\uc744 \ubcc0\uacbd\ud558\uace0, API \ud638\ucd9c\uc744 \uc870\uc791\ud558\uba70, \uc0ac\uc6a9\uc790\uac00 \uc758\ub3c4\ud558\uc9c0 \uc54a\uc740 \uac70\ub798\uc5d0 \uc11c\uba85\ud558\ub3c4\ub85d \uc571\uc744 \uc18d\uc785\ub2c8\ub2e4. Ledger\uc758 CTO\uc778 Charles Guillemet\uc740 \uacf5\uaca9\uc774 \uc5ec\uc804\ud788 \ud65c\uc131\ud654\ub418\uc5b4 \uc788\uc73c\uba70 \uc554\ud638 \ud654\ud3d0 \uc0ac\uc6a9\uc790\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uc9c0\uac11\ub9cc \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0 \uc628\uccb4\uc778 \uac70\ub798\ub97c \ud558\uc9c0 \uc54a\uc544\uc57c \ud55c\ub2e4\uace0 \uacbd\uace0\ud588\uc2b5\ub2c8\ub2e4. \ud558\ub4dc\uc6e8\uc5b4 \uc9c0\uac11 \uc0ac\uc6a9\uc790\ub294 \uc11c\uba85\ud558\uae30 \uc804\uc5d0 \uc138\ubd80 \uc815\ubcf4\ub97c \ud655\uc778\ud558\uc5ec \uc790\uc2e0\uc744 \ubcf4\ud638\ud560 \uc218 \uc788\uc9c0\ub9cc, \uc9c0\uac11\uc774 \uc5c6\ub294 \uc0ac\ub78c\uc740 \ub354 \ub192\uc740 \uc704\ud5d8\uc5d0 \uc9c1\uba74\ud569\ub2c8\ub2e4.<\/p>\n\n

\uc5f0\uad6c\uc6d0\ub4e4\uc740 \ub610\ud55c \ud53c\uc2f1 \uc778\ud504\ub77c\uac00 \ud6d4\uce5c \uc138\ubd80 \uc815\ubcf4\ub97c “websocket-api2.publicvm.com”\uc73c\ub85c \ubcf4\ub0b8\ub2e4\ub294 \uc0ac\uc2e4\uc744 \ubc1c\uacac\ud588\uc2b5\ub2c8\ub2e4. \uc774\ub294 \uacf5\uaca9\uc774 \uc798 \uc870\uc728\ub418\uc5c8\uc74c\uc744 \ubcf4\uc5ec\uc90d\ub2c8\ub2e4. \uc774\ub294 \uc62c\ud574 \ucd08 npm \uc0ac\uac74, \uc989 reverse shell\ub85c ethers \ud328\ud0a4\uc9c0\ub97c \ud328\uce58\ud55c 3\uc6d4 \uc0ac\uac74\uacfc eslint-config-prettier\ub97c \ud45c\uc801\uc73c\ub85c \uc0bc\uc740 7\uc6d4 \uc0ac\uac74\uc5d0 \uc774\uc740 \uac83\uc785\ub2c8\ub2e4. \ucea0\ud398\uc778\uc740 \uacc4\uc18d \uc9c4\ud654\ud558\uace0 \uc788\uc73c\uba70, \uc774\ubc88\uc5d0\ub294 \uacf5\uaca9\uc790\ub4e4\uc774 \uc0c8\ub85c\uc6b4 \ubc29\uc2dd\uc73c\ub85c Ethereum \uc2a4\ub9c8\ud2b8 \uacc4\uc57d\uc744 \uc0ac\uc6a9\ud588\uc2b5\ub2c8\ub2e4. colortoolsv2 \ubc0f mimelib2\ub77c\ub294 \ub450 \uac1c\uc758 npm \ud328\ud0a4\uc9c0\ub294 Ethereum \uc2a4\ub9c8\ud2b8 \uacc4\uc57d \ub0b4\ubd80\uc5d0 \uc545\uc131 \uba85\ub839\uc744 \uc228\uacbc\uc2b5\ub2c8\ub2e4. \ub2e4\uc6b4\ub85c\ub4dc\ub418\uba74 \ud328\ud0a4\uc9c0\ub294 \ud0d0\uc9c0\ub97c \ub354 \uc5b4\ub835\uac8c \ub9cc\ub4dc\ub294 2\ub2e8\uacc4 \uba40\uc6e8\uc5b4\ub97c \uc124\uce58\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n\n

Ethereum \uc2a4\ub9c8\ud2b8 \uacc4\uc57d\uc740 \ube14\ub85d\uccb4\uc778\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 \uc791\uc740 \ud504\ub85c\uadf8\ub7a8\uc785\ub2c8\ub2e4. \uacf5\uac1c\ub418\uc5b4 \uc788\uc73c\uba70 \uacf5\uac1c API\ucc98\ub7fc \uc791\ub3d9\ud569\ub2c8\ub2e4. \uc774 \uacbd\uc6b0 \ud574\ucee4\ub294 \uba40\uc6e8\uc5b4\ub97c \ub2e4\uc6b4\ub85c\ub4dc\ud558\uae30 \uc704\ud55c \ub9c1\ud06c\ub97c \uc800\uc7a5\ud558\ub294 \ub370 \uc0ac\uc6a9\ud588\uc73c\ubbc0\ub85c \ub204\uad70\uac00 \ud328\ud0a4\uc9c0\ub97c \ud655\uc778\ud558\ub354\ub77c\ub3c4 \uc704\ud5d8\ud55c \ucf54\ub4dc\ub97c \ubcf4\uc9c0 \ubabb\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \ucc3d\uc758\uc801\uc778 \uba85\ub839 \ubc0f \uc81c\uc5b4 \ubc29\uc2dd\uc740 \uc704\ud611 \ud589\uc704\uc790\uac00 \ud0d0\uc9c0\ub97c \ud53c\ud558\uae30 \uc704\ud574 \uc5b4\ub5bb\uac8c \uc801\uc751\ud558\uace0 \uc788\ub294\uc9c0\ub97c \ubcf4\uc5ec\uc90d\ub2c8\ub2e4.<\/p>\n\n

\uacf5\uaca9\uc790\ub4e4\uc740 \ub610\ud55c GitHub \uc800\uc7a5\uc18c\ub97c \uc2e0\ub8b0\ud560 \uc218 \uc788\ub3c4\ub85d \ub9cc\ub4e4\ub824\uace0 \uc2dc\ub3c4\ud588\uc2b5\ub2c8\ub2e4. solana-trading-bot-v2 \ubc0f ethereum-mev-bot-v2\uc640 \uac19\uc740 \uac00\uc9dc \ud504\ub85c\uc81d\ud2b8\ub97c \ub9cc\ub4e4\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud504\ub85c\uc81d\ud2b8\uc5d0\ub294 \ub9ce\uc740 \ubcc4, \uad00\ucc30\uc790 \ubc0f \ucee4\ubc0b\uc774 \uc788\uc5c8\uc9c0\ub9cc \uc774 \ud65c\ub3d9\uc758 \ub300\ubd80\ubd84\uc740 \uac00\uc9dc\uc600\uc2b5\ub2c8\ub2e4. \uacc4\uc815\uc740 \uc885\uc885 \ud30c\uc77c \ud558\ub098\ub9cc \uc0ac\uc6a9\ud558\uc5ec \ub3d9\uc2dc\uc5d0 \uc0dd\uc131\ub418\uc5c8\uc73c\uba70 \uc790\ub3d9 \ucee4\ubc0b\uc73c\ub85c \uc22b\uc790\ub97c \ubd80\ud480\ub838\uc2b5\ub2c8\ub2e4. \uc774 \uc18c\uc15c \uc5d4\uc9c0\ub2c8\uc5b4\ub9c1 \ud2b8\ub9ad\uc740 \uc545\uc131 npm \ud328\ud0a4\uc9c0\ub97c \uc791\uc5c5\uc5d0 \ud3ec\ud568\ud560 \uc218 \uc788\ub294 \uac1c\ubc1c\uc790\uc5d0\uac8c \uc800\uc7a5\uc18c\ub97c \uc2e4\uc81c\ucc98\ub7fc \ubcf4\uc774\uac8c \ud588\uc2b5\ub2c8\ub2e4.<\/p>\n\n

\uc804\ubb38\uac00\ub4e4\uc740 \uacf5\uae09\ub9dd \uacf5\uaca9\uc774 \ud2b9\ud788 \uc2e0\ub8b0\ud560 \uc218 \uc788\ub294 \ub3c4\uad6c\ub97c \ub300\uc0c1\uc73c\ub85c \ud558\uae30 \ub54c\ubb38\uc5d0 \uc704\ud5d8\ud558\ub2e4\uace0 \uacbd\uace0\ud569\ub2c8\ub2e4. \uc545\uc131 \ucf54\ub4dc\ub97c \uc624\ud508 \uc18c\uc2a4 \ub77c\uc774\ube0c\ub7ec\ub9ac \ub0b4\uc5d0 \uc228\uae30\uba74 \ud574\ucee4\ub294 \uc218\ubc31\ub9cc \uba85\uc758 \uac1c\ubc1c\uc790\uc640 \ucd5c\uc885 \uc0ac\uc6a9\uc790\uc5d0\uac8c \ud55c \ubc88\uc5d0 \ub3c4\ub2ec\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc62c\ud574\uc5d0\ub9cc \uc5f0\uad6c\uc6d0\ub4e4\uc740 \uc554\ud638 \ud654\ud3d0\ub97c \ud6d4\uce58\ub824\ub294 npm, GitHub \ubc0f PyPI\uc5d0\uc11c 20\uac1c \uc774\uc0c1\uc758 \ucea0\ud398\uc778\uc744 \ubc1c\uacac\ud588\uc2b5\ub2c8\ub2e4. \uc77c\ubd80\ub294 \uc778\ud3ec\uc2a4\ud2f8\ub7ec\ub97c \uc0ac\uc6a9\ud588\uace0, \ub2e4\ub978 \uc77c\ubd80\ub294 \ucf54\uc778 \ub9c8\uc774\ub108\ub97c \ubc30\ud3ec\ud588\uc73c\uba70, \ub9ce\uc740 \uc0ac\ub78c\ub4e4\uc774 \ubbfc\uac10\ud55c \ub370\uc774\ud130\ub97c \ucea1\ucc98\ud558\uae30 \uc704\ud574 \ud53c\uc2f1\uc5d0 \uc758\uc874\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n\n

\uc758\uc2ec\uc2a4\ub7ec\uc6b4 \ub3c4\uba54\uc778, \ub09c\ub3c5\ud654\ub41c \ucf54\ub4dc, \uac00\uc9dc \uc800\uc7a5\uc18c\uc640 \uac19\uc740 \uce68\ud574 \uc9c0\ud45c(IOC)\ub294 \ubcf4\uc548 \ud300\uc774 \uc774\ub7ec\ud55c \uc704\ud611\uc744 \uac10\uc9c0\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub429\ub2c8\ub2e4. \uadf8\ub7fc\uc5d0\ub3c4 \ubd88\uad6c\ud558\uace0 \ub9ce\uc740 \uc0ac\uc6a9\uc790\ub294 \uc790\uae08\uc774 \uc0ac\ub77c\uc9c8 \ub54c\uae4c\uc9c0 \uc54c\uc9c0 \ubabb\ud560 \uac83\uc785\ub2c8\ub2e4. \ub2f9\ubd84\uac04 \uac1c\ubc1c\uc790\ub294 \ud328\ud0a4\uc9c0, \uc720\uc9c0 \uad00\ub9ac\uc790 \ubc0f \ucf54\ub4dc\ub97c \uc0ac\uc6a9\ud558\uae30 \uc804\uc5d0 \uc8fc\uc758 \uae4a\uac8c \ud655\uc778\ud574\uc57c \ud569\ub2c8\ub2e4. \uc554\ud638 \ud654\ud3d0 \uc0ac\uc6a9\uc790\ub294 \ud558\ub4dc\uc6e8\uc5b4 \uc9c0\uac11\uc744 \uace0\ub824\ud558\uace0 \uc704\ud611\uc774 \ud1b5\uc81c\ub420 \ub54c\uae4c\uc9c0 \ub300\uaddc\ubaa8 \uc774\uc804\uc744 \ud53c\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774 \uacf5\uaca9\uc740 \uc0ac\uc774\ubc84 \ubc94\uc8c4\uac00 \uc5bc\ub9c8\ub098 \ube60\ub974\uac8c \uc9c4\ud654\ud558\uace0 \uc788\uc73c\uba70, \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uacf5\uae09\ub9dd\uacfc \ub514\uc9c0\ud138 \uc790\uc0b0\uc744 \ubaa8\ub450 \ubcf4\ud638\ud558\ub294 \uac83\uc774 \uc5bc\ub9c8\ub098 \uc911\uc694\ud55c\uc9c0\ub97c \ubcf4\uc5ec\uc90d\ub2c8\ub2e4.<\/p>","protected":false},"excerpt":{"rendered":"

\uc0c8\ub85c\uc6b4 \uc0ac\uc774\ubc84 \uacf5\uaca9\uc774 \uc0ac\uc6a9\uc790\uac00 \uac70\ub798\ub97c \ubcf4\ub0bc \ub54c \uc554\ud638 \ud654\ud3d0\ub97c \ud6d4\uce58\uace0 \uc788\uc73c\uba70, \ub9ce\uc740 \uc804\ubb38\uac00\ub4e4\uc740 \uc774\ub97c \uc5ed\uc0ac\uc0c1 \uac00\uc7a5 \ud070 \uacf5\uae09\ub9dd \uacf5\uaca9\uc774\ub77c\uace0 \ubd80\ub985\ub2c8\ub2e4. \ud574\ucee4\ub294 \ud53c\uc2f1 \uc774\uba54\uc77c\uc744 \uc0ac\uc6a9\ud558\uc5ec npm \ud328\ud0a4\uc9c0 \uc720\uc9c0 \uad00\ub9ac\uc790 \uacc4\uc815\uc744 \ud574\ud0b9\ud588\uc2b5\ub2c8\ub2e4.…<\/p>\n","protected":false},"author":2,"featured_media":2166,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-2165","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-solana"],"_links":{"self":[{"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/posts\/2165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/comments?post=2165"}],"version-history":[{"count":1,"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/posts\/2165\/revisions"}],"predecessor-version":[{"id":2167,"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/posts\/2165\/revisions\/2167"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/media\/2166"}],"wp:attachment":[{"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/media?parent=2165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/categories?post=2165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/ko\/wp-json\/wp\/v2\/tags?post=2165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}