A large-scale NPM supply chain attack is unfolding after a reputable developer’s account was compromised. Malicious code hidden in popular packages—downloaded over 1 billion times—silently swaps wallet addresses to steal funds.$BTC $ETH $SOL


Ledger CTO Charles Guillemet warned that anyone not using a hardware wallet should avoid on-chain transactions until further notice. While hardware wallets with clear signing remain secure, risks persist for software wallet users, with concerns that seed phrases may also be targeted.
So far, Arkham confirms $159 in stolen funds linked to attacker addresses. Though the number looks small, the potential scope makes this one of the most dangerous threats the JavaScript ecosystem has faced.
#Bitcoin Market Update
SOL-2,68%
BTC-0,9%
ETH-1,15%
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 1
  • Repost
  • Share
Comment
0/400
KingDollar786vip
· 2025-09-09 02:56
Ape In 🚀
Reply0
  • Pin

Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate App
Community
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)