Crypto Briefing· John Chen·· 2 小时前精选AI 评分76
Ethersphere 的 bee-js 13.3.0 与 Swarm Desktop 0.56.2 遭劫持，被植入窃取钱包的恶意软件
Hackers hijack Ethersphere’s bee-js package and Swarm Desktop app to push wallet-stealing malware
AI brief
Compromised releases of bee-js 13.3.0 and Swarm Desktop 0.56.2 went after Swarm node keys, and affected users are being told to rotate wallets and remove backdoors Attackers turned Ethersphere’s own release pipeline against its users. Malicious builds of the @ethersphere/bee-js npm package and the Swarm Desktop app shi…
Why it matters
The report reconstructs how the official release pipeline was hijacked and why upgrading alone does not undo exposed keys.
Source: Crypto Briefing · cryptobriefing.com