Attackers exploited a dormant npm maintainer account to push malicious node-ipc versions, stealing crypto keys, AWS tokens, and exchange API secrets. The incident highlights the growing threat of supply chain attacks in the crypto ecosystem.

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.