Ledger CTO warns: NPM account compromise could impact the entire JavaScript ecosystem
-
最新报道：According to Bijie.com, on September 9 (UTC+8), Ledger Chief Technology Officer (CTO) Charles Guillemet warned of a large-scale supply chain attack underway. A prominent developer's NPM account has been compromised, resulting in over 1 billion downloads of affected packages and the potential for widespread disruption across the JavaScript ecosystem. The malicious code tampered with encrypted addresses during transactions to steal funds. It's unclear whether the attackers directly stole software wallet seed phrases. Guillemet stated that users of hardware wallets with clear signatures face a lower risk, but they should still carefully verify each transaction. Users who don't use hardware wallets should avoid on-chain transactions for now. He added that the attack "potentially impacts all chains."
下一篇
Largest Supply Chain Attack Targets JavaScript Libraries, Threatens Crypto Security
- a significant supply chain attack has compromised widely used JavaScript software librarie...
24小时热点
热点专题
418154