Ledger CTO urges users to verify Dapp transactions with hardware wallets as a supply chain attack spreads malicious code ...

According to Guillemet, the malicious code — already pushed into packages with over 1 billion downloads — is designed to silently swap crypto wallet addresses in transactions. That means unsuspecting ...

Ledger CTO cautions that there is an NPM supply chain attack on the rampage. He encouraged users to cease risky on-chain ...

In a supply chain attack, attackers have injected malware into NPM packages with over 2.6 billion weekly downloads after ...

A significant supply chain attack hit NPM after 15 popular Gluestack packages with over 950,000 weekly downloads were compromised to include malicious code that acts as a remote access trojan (RAT).