Security firm: NPM supply chain attacked, developer qix affected
ChainCatcher news, according to market sources, well-known developer qix suffered a phishing attack that resulted in npm packages being injected with malicious code. Affected packages include chalk, strip-ansi, color-convert, and others.
The attack methods include hooking wallet functions, tampering with ETH/SOL transaction receiving addresses, and replacing addresses in network responses. User recommendations: Always verify the recipient and amount in the wallet interface, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value operations.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Colosseum Announces Winning Projects of Solana Cypherpunk Hackathon
US Bitcoin company increased its holdings by 613 BTC this week, with total holdings reaching $444 million
0G Foundation: Contract Attacked, Resulting in the Theft of 520,000 $0G
Data: Public and private companies have accumulated a total of 883,000 BTC since 2023
