Attackers hijacked Ethersphere’s release automation pipeline to publish malicious versions of the bee-js library and Swarm Desktop application. The compromised builds contain routines designed to exfiltrate cryptocurrency wallet keys and decryption passwords, while also establishing a persistent backdoor on affected systems.

supply-chainmalwarenpmcryptocurrency
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →