Ledger CTO: Large-Scale Supply Chain Attack Underway, Entire JavaScript Ecosystem at Risk
BlockBeats News, September 9, Ledger's Chief Technology Officer Charles Guillemet wrote that, "A large-scale supply chain attack is currently taking place: a well-known developer's NPM account has been compromised. The affected package has been downloaded over 1 billion times, which means the entire JavaScript ecosystem could be at risk.
The malicious code works by silently tampering with cryptocurrency addresses in the background to steal funds.
If you use a hardware wallet, please carefully verify each signature transaction, and you are safe.
If you do not use a hardware wallet, please refrain from making any on-chain transactions for now.
It is currently unclear whether the attacker has already stolen the software wallet's mnemonic phrase.
For more details, see the report. If you are using Ledger or another hardware wallet that supports clear signatures, you will not be affected. My previous tweets were a reminder: Users who do not use hardware wallets that support clear signatures are at risk. Please be sure to carefully review each transaction before signing."
You may also like

Lily Liu, the chair of the Solana Foundation, shouted "Don't waste time on crypto," is the crypto industry really dead?

The little deer live by the water and grass

The world belongs to Chinese people who speak English

Why Stop at 126K? Michael Saylor Breaks Down BTC Stagnation and Retail Absence Truth

Virtuals Protocol's inaugural Titan project: ROBO aims to give a wallet to a robot

Stablecoin Latest Report: Actual Distribution and Circulation Much More Notable Than Supply

Paradigm's New Arithmetic: When Crypto Can't Hold 12.7 Billion, AI Becomes the Answer

Wintermute Founder: In the Lost Cryptocurrency Market, What Can We Still Do?

$1.3 Billion Debt: BitDeer Faces Tough Battle

Anthropic's IPO Gamble: At the Most Unlikely Moment, It Chose to Say No

Paradigm's Math Problem: $12.7 Billion, Too Big for a Single Crypto Fund

Ethereum Unveils Scaling Roadmap, What's Different This Time?

Anthropic Ban Wave, OpenAI $100 Billion Funding Controversy: What Is the Overseas Crypto Community Talking About Today?

Morning News | OpenAI receives $110 billion investment; Solana launches Solana Payments; M0, MoonPay, and PayPal jointly launch PYUSDx

Bloomberg: A Romanian Presidential Election Intervened by Crypto Traders

Founders Fund, Pantera, and Franklin Templeton join Sentient's "Arena" to stress test enterprise-level AI agents

Why Retail Is Shifting From Crypto to Equities: Will They Return?
Retail traders are exiting the crypto market and gravitating towards equities. Bitcoin saw a notable reduction in spot…

Canton Crypto Network vs. XRP: Understanding DTCC’s Strategic Approach to Infrastructure and Liquidity
Key Takeaways Canton Network and XRP serve distinct roles in blockchain technology: Canton for asset tokenization and atomic…