Express
Security Alert: Another Prominent NPM Account Compromised, Injected with Wallet-Stealing Malware
Summary: According to Socket monitoring, the ongoing NPM supply chain attack has spread from well-known developer Qix to another highly prominent maintainer. The NPM account duckdb_admin, responsible for DuckDB-related packages, was compromised, and multiple malicious versions were released. The injected code is the same wallet-stealing malware used when Qix's account was compromised, indicating they are part ...
According to Socket monitoring, the ongoing NPM supply chain attack has spread from well-known developer Qix to another highly prominent maintainer. The NPM account duckdb_admin, responsible for DuckDB-related packages, was compromised, and multiple malicious versions were released. The injected code is the same wallet-stealing malware used when Qix's account was compromised, indicating they are part of the same attack operation.
Ledger CTO stated that a large-scale supply chain attack could pose risks to the entire JavaScript ecosystem. However, the NPM attackers were unsuccessful, with almost no victims.
Tags:
Link: Security Alert: Another Prominent NPM Account Compromised, Injected with Wallet-Stealing Malware [Copy]
