JavaScript | Crypto

A new cyberattack is silently targeting crypto from users during transactions amid an incident that security researchers describe as the largest supply chain attack in history. BleepingComputer reported that hackers compromised NPM package maintainer accounts through phishing emails and injected malware that steals crypto. The attack targeted JavaScript developers with fraudulent emails appearing to originate […] The post Largest supply chain attack in history targets crypto users through compromised JavaScript packages appeared first on CryptoSlate.

The breach hit core JavaScript libraries such as chalk and strip-ansi, downloaded billions of times each week, raising alarms over the security of open-source software. Hackers have compromised widely used JavaScript software libraries in what’s being called the largest supply chain attack in history. The injected malware is reportedly designed to steal crypto by swapping wallet addresses and intercepting transactions. According to several reports on Monday, hackers broke into the node package manager (NPM) account of a well-known developer and secretly added malware to popular JavaScript libraries used by millions of apps. The malicious code swaps or hijacks crypto wallet addresses, potentially putting many projects at risk. Read more