事件时间:2026年3月4日 - 2026年3月22日 发布日期:2026年3月25日 严重等级:高危
Apifox 公网 SaaS 版桌面客户端动态加载的外部 JavaScript 文件遭到恶意篡改(供应链攻击)。攻击者通过 C2 恶意域名 apifox.it.com(托管于 Cloudflare)持续活跃 18 天,恶意脚本可能读取用户本地高敏感文件并上报至攻击者服务器。
| <template> | |
| <div class="layout-breadcrumb-seting"> | |
| <el-drawer | |
| :title="$t('layout.configTitle')" | |
| v-model="getThemeConfig.isDrawer" | |
| direction="rtl" | |
| destroy-on-close | |
| size="260px" | |
| @close="onDrawerClose" | |
| > |
| # Project Policy | |
| This policy provides a single, authoritative, and machine-readable source of truth for AI coding agents and humans, ensuring that all work is governed by clear, unambiguous rules and workflows. It aims to eliminate ambiguity, reduce supervision needs, and facilitate automation while maintaining accountability and compliance with best practices. | |
| # 1. Introduction | |
| > Rationale: Sets the context, actors, and compliance requirements for the policy, ensuring all participants understand their roles and responsibilities. | |
| ## 1.1 Actors |
| // Types for the result object with discriminated union | |
| type Success<T> = { | |
| data: T; | |
| error: null; | |
| }; | |
| type Failure<E> = { | |
| data: null; | |
| error: E; | |
| }; |