Ledger CTO: Large-Scale Supply Chain Attack Underway, Entire JavaScript Ecosystem at Risk
BlockBeats News, September 9, Ledger's Chief Technology Officer Charles Guillemet wrote that, "A large-scale supply chain attack is currently taking place: a well-known developer's NPM account has been compromised. The affected package has been downloaded over 1 billion times, which means the entire JavaScript ecosystem could be at risk.
The malicious code works by silently tampering with cryptocurrency addresses in the background to steal funds.
If you use a hardware wallet, please carefully verify each signature transaction, and you are safe.
If you do not use a hardware wallet, please refrain from making any on-chain transactions for now.
It is currently unclear whether the attacker has already stolen the software wallet's mnemonic phrase.
For more details, see the report. If you are using Ledger or another hardware wallet that supports clear signatures, you will not be affected. My previous tweets were a reminder: Users who do not use hardware wallets that support clear signatures are at risk. Please be sure to carefully review each transaction before signing."
You may also like

Tether's major shareholder invests £12 million to support the "British version of Trump" in the cryptocurrency sector

Huang Renxun's Latest Podcast: Will NVIDIA Reach $1 Trillion? Will the Number of Programmers Increase Instead of Decrease? How to Deal with AI Anxiety?

Besides Resolv Hack, This DeFi Vulnerability Type Has Occurred Four Times

Trump Cries Peace, $1.5 Billion Dash | Rewire News Evening Brief

From x402 to MPP: Cloudflare's crucial vote, will it go to Coinbase or Stripe?

BlackRock CEO issues annual open letter: The wave of tokenization has arrived, and we will lead this trend

When Backpack backstabs the community

When gold is no longer a safe haven, and Bitcoin continues to panic

Trump, the World's Largest Oil Trader

If the US and Iran have not reached an agreement in 5 days, what other cards does Trump have?

Tether Whale Dumps £12 Million, Backing Crypto’s ‘British Trump’

Ethereum Foundation Post: Rethinking the Division of Work Between L1 and L2 to Build the Ultimate Ethereum Ecosystem

Two Major Prediction Market Platforms Unite Rarely, What Is the Story Behind This New Fund?

Dragonfly Partners: Most agents will not engage in autonomous trading, how can crypto payments prevail?

US AI Startup Goes All In on Chinese Mega-Model | Rewire News Morning Brief

Trump Lies Again: A "Five-Day Pause" Psyop, How Wall Street, Bitcoin, and Polymarket Insiders Synced Uposciogen

When a Token Becomes Labor, People Become the Interface

