{"id":150625,"date":"2025-12-04T23:12:08","date_gmt":"2025-12-04T21:12:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/analiz-konfidenczialnyh-dannyh-zahvachennyh-chervyom-shai-hulud-2"},"modified":"2025-12-04T23:12:08","modified_gmt":"2025-12-04T21:12:08","slug":"analiz-konfidenczialnyh-dannyh-zahvachennyh-chervyom-shai-hulud-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/analiz-konfidenczialnyh-dannyh-zahvachennyh-chervyom-shai-hulud-2","title":{"rendered":"Analiza e t\u00eb dh\u00ebnave t\u00eb ndjeshme, t\u00eb kapura nga krimbi Shai-Hulud 2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Wiz publikoi rezultatet e analiz\u00ebs s\u00eb aktiviteteve t\u00eb virusit Shai-Hulud 2, gjat\u00eb aktivitetit t\u00eb t\u00eb cilit n\u00eb depozit\u00ebn NPM u publikuan l\u00ebshime me malware t\u00eb mbi 800 paketave, t\u00eb cilat kishin nj\u00eb total prej mbi 100 milion shkarkimesh. Pas instalimit t\u00eb paket\u00ebs s\u00eb prekur, virusi aktivizohet dhe fillon t\u00eb k\u00ebrkoj\u00eb t\u00eb dh\u00ebna konfidenciale, publikon l\u00ebshime t\u00eb reja me malware (n\u00eb rast se gjendet nj\u00eb token lidhjeje me depozit\u00ebn NPM) dhe publikon t\u00eb dh\u00ebna konfidenciale t\u00eb gjetura n\u00eb sistem duke krijuar depozita t\u00eb reja n\u00eb GitHub. <\/p>\n

N\u00eb GitHub jan\u00eb zbuluar m\u00eb shum\u00eb se 30,000 depo me t\u00eb dh\u00ebna t\u00eb kapura nga nj\u00eb molusk. N\u00eb rreth 70% t\u00eb k\u00ebtyre depo, \u00ebsht\u00eb vendosur skedari content.json, n\u00eb 50% \u2014 skedari truffleSecrets.json, dhe n\u00eb 80% \u2014 environment.json, q\u00eb p\u00ebrmbajn\u00eb \u00e7el\u00ebsa aksesit, t\u00eb dh\u00ebna konfidenciale dhe variabla mjedisi, t\u00eb gjetura n\u00eb sistemin e zhvilluesit q\u00eb ka instaluar nj\u00eb paket\u00eb t\u00eb d\u00ebmshme me molusk. Gjithashtu, n\u00eb k\u00ebto depo jan\u00eb zbuluar rreth 400 skedar\u00eb actionsSecrets.json me \u00e7el\u00ebsa t\u00eb gjetur n\u00eb mjediset p\u00ebr t\u00eb ekzekutuar GitHub Actions. <\/p>\n

N\u00eb skedar\u00ebt contents.json ishin t\u00eb pranishme m\u00eb shum\u00eb se 500 t\u00eb dh\u00ebna unike hyr\u00ebse dhe tokena p\u00ebr lidhje me GitHub. N\u00eb skedar\u00ebt truffleSecrets.json ishin t\u00eb dh\u00ebna konfidenciale t\u00eb gjetura si rezultat i ekzekutimit n\u00eb sistemin e prekur nga mjeti TruffleHog, i cili mbledh m\u00eb shum\u00eb se 800 lloje t\u00eb dh\u00ebnash, p\u00ebrfshir\u00eb \u00e7el\u00ebsa accessi, \u00e7el\u00ebsa enkriptimi, fjal\u00ebkalime dhe tokena t\u00eb p\u00ebrdorur n\u00eb sh\u00ebrbime t\u00eb ndryshme, ambientet cloud, produkte dhe DBMS. N\u00eb total, n\u00eb truffleSecrets.json u gjet\u00ebn mbi 400 mij\u00eb regjistrime unike nga t\u00eb cilat rreth 2.5% (~10000) ishin verifikuar. <\/p>\n

Supozimi \u00ebsht\u00eb se informata konfidenciale q\u00eb \u00ebsht\u00eb b\u00ebr\u00eb publike mund t\u00eb sh\u00ebrbej\u00eb si nj\u00eb pik\u00ebnisje p\u00ebr nj\u00eb val\u00eb t\u00eb re sulmesh, pasi shum\u00eb t\u00eb dh\u00ebna mbeten t\u00eb vlefshme. P\u00ebr shembull, kontrolli tregoi se 60% e tokenave t\u00eb aksesit t\u00eb NPM, t\u00eb kapura nga sistemet e prekur nga virusi, mbeten aktive. <\/p>\n

N\u00eb raport p\u00ebrmenden gjithashtu statistika e p\u00ebrgjithshme, e cila \u00ebsht\u00eb marr\u00eb nga analiza e variablave t\u00eb mjedisit nga sistemet e prekur. 23% e ekzekutimeve t\u00eb moluskut ndodh\u00ebn n\u00eb kompjuter\u00ebt e zhvilluesve, nd\u00ebrsa 77% \u2014 n\u00eb mjediset e sistemeve t\u00eb integrimit t\u00eb vazhduesh\u00ebm (60% GitHub Actions, 5% \u2014 Jenkins, 5% \u2014 GitLab CI, 3% \u2014 AWS CodeBuild). N\u00eb 87% t\u00eb sistemeve \u00ebsht\u00eb p\u00ebrdorur Linux, 12% \u2014 macOS dhe 1% \u2014 Windows. 76% e ekzekutimeve jan\u00eb b\u00ebr\u00eb n\u00eb konteiner\u00eb, 13% \u2014 n\u00eb sistemet kryesore. <\/p>\n

60% e t\u00eb gjitha infeksioneve ndodhi p\u00ebr shkak t\u00eb instalimit t\u00eb l\u00ebshimeve t\u00eb d\u00ebmshme t\u00eb paketave @postman\/tunnel-agent-0.6.7 dhe @asyncapi\/specs-6.8.3. N\u00eb 99% t\u00eb rasteve, molusku u aktivizua gjat\u00eb ekzekutimit t\u00eb komand\u00ebs \u00abnode setup_bun.js\u00bb, e cila \u00ebsht\u00eb specifikuar n\u00eb package.json n\u00eb seksionin preinstall (1% e mbetur ndoshta i p\u00ebrket p\u00ebrpjekjeve p\u00ebr testim).

\"Analiza<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Wiz \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u043b\u0435\u0434\u043e\u0432 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0432\u044f Shai-Hulud 2, \u0432 \u0445\u043e\u0434\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0431\u043e\u043b\u0435\u0435 800 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432 \u0441\u0443\u043c\u043c\u0435 \u0431\u043e\u043b\u0435\u0435 100 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430, \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439\u0441\u044f \u0447\u0435\u0440\u0432\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0440\u0435\u043b\u0438\u0437\u044b (\u043f\u0440\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0442\u043e\u043a\u0435\u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 NPM) \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":150626,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150625","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Analiza e t\u00eb dh\u00ebnave konfidenciale t\u00eb kapura nga krimbi Shai-Hulud 2 | ProHoster","description":"Kompania Wiz publikoi rezultatet e analiz\u00ebs s\u00eb gjurm\u00ebve t\u00eb aktivitetit t\u00eb krimit Shai-Hulud 2, gjat\u00eb aktivitetit t\u00eb t\u00eb cilit n\u00eb depot NPM u publikuan l\u00ebshime t\u00eb d\u00ebmshme t\u00eb m\u00eb shum\u00eb se 800 paketave, duke sh\u00ebnuar nj\u00eb total m\u00eb shum\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/analiz-konfidenczialnyh-dannyh-zahvachennyh-chervyom-shai-hulud-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0432\u0451\u043c Shai-Hulud 2 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Wiz \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u043b\u0435\u0434\u043e\u0432 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0432\u044f Shai-Hulud 2, \u0432 \u0445\u043e\u0434\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0431\u043e\u043b\u0435\u0435 800 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432 \u0441\u0443\u043c\u043c\u0435 \u0431\u043e\u043b\u0435\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/analiz-konfidenczialnyh-dannyh-zahvachennyh-chervyom-shai-hulud-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-04T21:12:08+00:00","article:modified_time":"2025-12-04T21:12:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150625","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:25:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:25:22","updated":"2026-01-23 16:25:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/150625","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=150625"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/150625\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/150626"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=150625"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=150625"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=150625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}