Unverified50% confidenceReleaseExact time
CloudSEK 公开了一个凭证暴露查询工具（exposure.cloudsek.com/ai-supply-chain-incident）用于检查密钥是否出现在攻击者收集的数据中
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/21/2026
First Seen
Valid until: 11/19/2026
Sources
Related Claims
Unverified恶意载荷运行后会收集环境变量、SSH 密钥、云凭证、Kubernetes 服务账户令牌及各类供应商 API Key67% similarUnverified恶意包一旦被安装，可在安装脚本或运行时读取环境变量和配置文件，窃取真实API密钥、云凭证、数据库密码等敏感信息66% similarUnverified针对SSH 22端口的自动化扫描攻击者通常使用Mirai等僵尸网络控制感染设备作为跳板，字典攻击凭据来自RockYou、LinkedIn等历次数据泄露事件66% similarUnverifiedOpenClaw's CloudHub contains nearly 3,000 Skills, of which 341 are malicious, typically luring users into downloading password-protected ZIP files to evade antivirus detection.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/782706API
curl https://kongchang.com/api/v1/knowledge/claims/782706MCP
get_claim(id=782706)