cryptocurrency

Ethersphere Supply Chain Compromise: Malicious bee-js 13.3.0 and Swarm Desktop 0.56.2

A supply-chain attack hit Ethersphere’s own release pipeline: malicious bee-js 13.3.0 on npm and Swarm Desktop 0.56.2 carry a loader that steals Swarm node wallet keys and installs persistence on Linux, macOS and Windows.