Apifox desktop client is attacked by supply chain malicious code can steal credentials and execute commands remotely

According to Slow Fog Monitor, the Apifox desktop client suffered a supply chain attack in which its official CDN-hosted front-end script files were injected with highly obfuscated malicious JavaScript code. Affected users may face risks such as credential theft, sensitive data leakage, remote command execution, etc., and malicious code is automatically executed and highly hidden. Slow Fog recommends that users immediately revoke all tokens, reset passwords, log out and log back in to invalidate sessions, block *.apifox.it.com domain names, purge local storage, and review API logs and unusual activity.