The attacker of the NPM developer account is currently suspected to have only profited about 20 dollars.

robot
Abstract generation in progress

On September 9, according to CertiK Alert monitoring, developer Qix's NPM account was phished, and the attacker injected malicious code into npm. According to Security Alliance, the attacker seems to have only profited about 0.05 ETH and 20 dollars worth of Meme coin. Earlier reports stated that Ledger's CTO Charles Guillemet posted that "a large-scale Supply Chain attack is currently underway: an NPM account of a well-known developer has been compromised. The affected package has been downloaded over 1 billion times, which means the entire JavaScript ecosystem may be at risk. The malicious code works by silently tampering with the Crypto Assets Address in the background to steal funds."

ETH-0.42%
MEME-3.68%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate App
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)