Hackers Compromise Ethersphere's Bee-Js and Swarm Desktop to Deliver Wallet-Stealing Malware

Hackers Compromise Ethersphere’s bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. Both releases download and run code built to steal the wallet key that Swarm Desktop keeps for its node, along with the stored password that unlocks

Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage… Read more →

Ethersphere's npm Package Hijacked to Spread Crypto Malware

Ethersphere's software was hijacked to distribute wallet-stealing malware. Users must take immediate action to secure their wallets.

Hackers hijack Ethersphere's bee-js package and Swarm Desktop app to push wallet-stealing malware

Hackers compromised Ethersphere's release pipeline to ship malicious bee-js 13.3.0 and Swarm Desktop 0.56.2 builds that stole Swarm wallet keys.