Update on the NPM attack: The attack fortunately failed, with almost no victims.���
It began with a phishing email from a fake npm support domain that stole credentials and gave attackers access to publish malicious package updates. The injected code targeted web crypto activity, hooking into Ethereum, Solana and other chains to hijack transactions, and replacing wallet addresses directly in network responses.
The attackers’ mistakes caused crashes in CI/CD pipelines, which led to early detection and limited impact. Still, this is a clear reminder: if your funds sit in a software wallet or on an exchange, you’re one code execution away from losing everything. Supply chain compromises remain a powerful malware delivery vector, and we’re also seeing more targeted attacks emerge.
Hardware wallets are built to withstand these threats. Features like Clear Signing let you confirm exactly what’s happening, and Transaction Checks flag suspicious activity before it’s too late.
The immediate danger may have passed, but the threat hasn’t. Stay safe.
🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk.
The malicious payload works by silently swapping crypto addresses on the fly to steal funds.
If you use a hardware wallet, pay attention to every transaction before signing and you're safe.
If you don’t use a hardware wallet, refrain from making any on-chain transactions for now.
It’s still unclear whether the attacker is also stealing seeds from software wallets directly at this stage.
Excellent report here: https://t.co/5CtiZJHYsN
A lot of DMs asking me for another game after @iluvpcs win.. Ok guys, let’s do it! 😁
Guess Bitcoin price as at 31 Dec 2024, 23:59:59 UTC. I will give the person with the closest guess 1 BTC.
The rules are simple:
1. Like, follow me and RT.
2. Comment: My Dec31 Bitcoin Price
@rektdiomedes start arb crosschain like crazy, 5-6 wallets simultaneously, 24h day till they shut down the chain.
Money are the most poweful drugs ever.
Still my hugest gain in defi since
@tripluca What I notice is that our heavily inflated touristic prices are very chaep at his eye's compared to his local prices back home.
We so f'ing became a 3rd world's economy