NPM `debug` Package Compromised by Phishing, Malicious Code Redirects Crypto
A compromised npm package account enabled malicious code injection, posing an immediate risk of cryptocurrency theft for browser-based application users.
JavaScript Supply Chain Attack Threatens DeFi Ecosystem
A compromised JavaScript package, widely integrated across DeFi, enables transaction hijacking, posing a systemic risk to user funds and operational integrity.
NPM Package Compromise Redirects Cryptocurrency Transactions via Phishing Attack
A supply chain compromise of critical npm packages, initiated by a phishing attack, injects malicious code to siphon browser-based cryptocurrency transactions.
NPM Supply Chain Compromised, Crypto Wallets Targeted by Self-Replicating Malware
A sophisticated supply chain attack on the NPM ecosystem injects wallet-swapping malware and a self-replicating worm, posing systemic risk to digital asset users.