Ripple NPM supply chain attack hunts for private keys

Ripple NPM supply chain attack hunts for private keys

: A mystery thief and a critical CVE involved in crypto cash grab

Ripple cryptocurrency software library hit by major security issue, wallets under threat

Malicious commits were uploaded to NPM but quickly removed.

Crypto-Stealing Backdoor Found in Official XRP Ledger NPM Package

XRP Ledger’s official NPM package was injected with a crypto-stealing backdoor. The affected NPM versions are 4.2.1 to 4.2.4 and 2.14.2. Users must upgrade to patched versions and rotate private keys. A supply chain attack compromised the official XRP Ledger JavaScript SDK, injecting a backdoor into specific versions of NPM. A backdoor in specific NPM versions targeted private key theft, putting connected XRP wallets at risk.  SlowMist issued a …

XRP Ledger SDK Compromised by Backdoor Exploit – MAXBIT

The XRP Ledger Foundation has warned about a security vulnerability in the official JavaScript SDK, which interacts with the XRPL. On April 21, Aikido Security revealed that several versions of its Node Package Manager (NPM) software were compromised and published, containing a backdoor that could steal private keys from users. Security Flaw in Developer Kit...

XRP Ledger Blocks Attempted Attack on Its Infrastructure - The Cryptocurrency Post

TL;DR A hacker attempted to attack the XRP Ledger infrastructure by compromising an NPM token and distributing malicious versions of xrpl.js. Aikido Security detected five tampered versions, and the XRP Ledger Foundation released a secure update without affecting the project’s core. Ripple Labs closed its legal dispute with the SEC after more than three years, agreeing to pay $50 million and recover another $75 million. An attempted attack agai…

URGENT: XRPL Security Alert - Backdoor Found in NPM Package Threatens Private Keys

The post URGENT: XRPL Security Alert – Backdoor Found in NPM Package Threatens Private Keys appeared on BitcoinEthereumNews.com. URGENT: XRPL Security Alert – Backdoor Found in NPM Package Threatens Private Keys – BitcoinWorld Skip to content Home News Crypto News URGENT: XRPL Security Alert – Backdoor Found in NPM Package Threatens Private Keys Source: https://bitcoinworld.co.in/xrpl-security-alert-npm/