Express
Security Agency: NPM Supply Chain Attacked, Developer qix Falls Victim
Summary: According to market reports, renowned developer qix fell victim to a phishing attack, resulting in malicious code being injected into npm software packages, including chalk, strip-ansi, color-convert, and others. The attack involved hooking wallet functions, altering ETH/SOL transaction receiving addresses, and replacing addresses in network responses. Users are advised to verify recipients and amounts on ...
According to market reports, renowned developer qix fell victim to a phishing attack, resulting in malicious code being injected into npm software packages, including chalk, strip-ansi, color-convert, and others.
The attack involved hooking wallet functions, altering ETH/SOL transaction receiving addresses, and replacing addresses in network responses. Users are advised to verify recipients and amounts on wallet interfaces, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value operations.
Tags:
Link: Security Agency: NPM Supply Chain Attacked, Developer qix Falls Victim [Copy]
