- Buy Crypto
- Markets
Futures- Spot
- Copy Trade
- Earn
- More
Ledger CTO: Large-Scale Supply Chain Attack Underway, Entire JavaScript Ecosystem at Risk
BlockBeats News, September 9, Ledger's Chief Technology Officer Charles Guillemet wrote that, "A large-scale supply chain attack is currently taking place: a well-known developer's NPM account has been compromised. The affected package has been downloaded over 1 billion times, which means the entire JavaScript ecosystem could be at risk.
The malicious code works by silently tampering with cryptocurrency addresses in the background to steal funds.
If you use a hardware wallet, please carefully verify each signature transaction, and you are safe.
If you do not use a hardware wallet, please refrain from making any on-chain transactions for now.
It is currently unclear whether the attacker has already stolen the software wallet's mnemonic phrase.
For more details, see the report. If you are using Ledger or another hardware wallet that supports clear signatures, you will not be affected. My previous tweets were a reminder: Users who do not use hardware wallets that support clear signatures are at risk. Please be sure to carefully review each transaction before signing."
You may also like
Vitalik Rare Self-Criticism: Ethereum Missed the Really Important Battle
SBF's bro turned 225 million into 5.5 billion in one year
These former crypto builders have joined the world's hottest AI project
Key Market Insights for March 5th, how much did you miss out on?
Crypto VC Inflection Point: The Survival Answers of a16z, Dragonfly, Paradigm
Is OKX's $25 Billion Valuation Really Justified?
SBF's little brother turned 225 million into 5.5 billion in one year
In a World of Disruption, How Can Humanities Workers Better Use AI?
Anthropic Open Letter: The Hypocritical Sam Altman, PUA Master
On the same day that Kraken's Fedmaster Account was approved, the banking lobbying group immediately launched a counterattack.
Bitwise: This weekend's attack accelerated the on-chain migration of the financial world
Market Downturn: Which Assets Are Worth Watching?
The real opportunity of stablecoins is not to kill Visa
Trump's AI Farce: Insult if You Don't Pay
US & Canada Crypto Tax Season 2026: Official Tax Reporting Support from WEEX × KoinX
Prepare for US & Canada crypto tax season 2026. Learn how to export your WEEX transaction history and access official reporting support through our partnership with KoinX.
Conversation between Tom Lee and "The Big Short" Author: AI has detected bubble signal, crypto correction due to gold liquidity being "siphoned off"
The true reason for Claude's ban, Kraken accessing the Federal Reserve payment system, What is the English community paying attention to?
App