coin-img-MONADMONAD+259.10%coin-img-ETHETH+5.33%coin-img-BTCBTC+1.98%coin-img-UCNUCN+0.23%coin-img-SOLSOL+4.81%coin-img-XRPXRP+9.69%coin-img-USDCUSDC-0.03%coin-img-HYPEHYPE+3.64%coin-img-MONADMONAD+259.10%coin-img-ETHETH+5.33%coin-img-BTCBTC+1.98%coin-img-UCNUCN+0.23%coin-img-SOLSOL+4.81%coin-img-XRPXRP+9.69%coin-img-USDCUSDC-0.03%coin-img-HYPEHYPE+3.64%coin-img-MONADMONAD+259.10%coin-img-ETHETH+5.33%coin-img-BTCBTC+1.98%coin-img-UCNUCN+0.23%coin-img-SOLSOL+4.81%coin-img-XRPXRP+9.69%coin-img-USDCUSDC-0.03%coin-img-HYPEHYPE+3.64%coin-img-MONADMONAD+259.10%coin-img-ETHETH+5.33%coin-img-BTCBTC+1.98%coin-img-UCNUCN+0.23%coin-img-SOLSOL+4.81%coin-img-XRPXRP+9.69%coin-img-USDCUSDC-0.03%coin-img-HYPEHYPE+3.64%
user-avatar
Anas Hassan

Supply-Chain Attack Compromises 490+ NPM Packages With 132 Million Monthly Downloads

A supply-chain breach has infected over 490 npm packages recording 132 million monthly downloads, targeting libraries linked to Ethereum Name Service, Zapier, and other cryptocurrency platforms, according to Aikido Security. The malware steals developer credentials and GitHub tokens during installation. If stolen credentials provide access to code repositories, attackers can breach additional accounts and distribute more compromised packages, enabling autonomous spread.
Selected
Disclaimer: The content above is only the author's opinion and does not represent BingX’s stance. It shall not be construed as investment advice from BingX. For details, refer to the Terms and Conditions.
Scams