Massive Cyberattack Targets Crypto Users via Compromised JavaScript Packages
- Hackers compromised the accounts of NPM package maintainers, affecting over 18 widely-used JavaScript packages with a total of 2.6 billion weekly downloads.
- The attack utilized phishing emails from an impersonated domain to gain access and inject malware that steals cryptocurrency.
- Malware operates as a browser-based interceptor, altering crypto transaction details across networks including Bitcoin, Ethereum, and others.
- Key libraries affected include “chalk” (300 million downloads), “debug” (358 million), and “ansi-styles” (371 million).
- Security experts recommend hardware wallet users verify transaction details, while software wallet users face increased risks.
This incident marks one of the largest supply chain attacks in history, demonstrating how attackers can exploit trusted development tools to reach end users effectively. The scale of this breach highlights vulnerabilities within the JavaScript ecosystem.
With over 2.6 billion weekly downloads at risk, users are urged to exercise caution with on-chain transactions, especially if using software wallets.(Source)
