XRP Ledger SDK Under Siege: Hackers Swipe Private Keys in Supply Chain Debacle! Update Now!
XRP Ledger users, beware! A supply chain attack on the xrpl NPM package has been stealing private keys like it’s collecting Pokémon cards. Update to versions 4.2.5 or 2.14.3 immediately to dodge this digital disaster and protect your crypto assets.
Hot Take:
Unbeknownst to them, XRP Ledger users got a surprise guest in their digital wallets. Thanks to a supply chain attack using the xrpl package, private keys were up for grabs faster than free samples at a grocery store. The attackers’ plan was as smooth as a jazz band at a wine bar, but now it’s time to change your tune – update to xrpl 4.2.5 or 2.14.3, and spare yourself a digital hangover!
Key Points:
– A supply chain attack compromised the xrpl NPM package, leading to stolen private keys.
– Five rogue versions of the xrpl package were discovered, with malicious code not present in GitHub releases.
– The malicious code included a backdoor for stealing cryptocurrency wallet credentials.
– Attackers refined their methods over time, integrating code more subtly.
– Users must update to xrpl versions 4.2.5 or 2.14.3 and transfer assets to new wallets.