The Apifox desktop client has been compromised in a supply chain attack, according to SlowMist's monitoring. The attack involved the injection of obfuscated malicious JavaScript code into the official CDN-hosted front-end script files. This breach poses significant risks to users, including credential theft, sensitive data leakage, and remote command execution. SlowMist recommends that affected users take immediate action to mitigate potential damage. Users should revoke all tokens, reset passwords, log out and log back in to invalidate sessions, block the *.apifox.it.com domain, clear local storage, and review API logs for any abnormal activity.