Articles for tag: Cybersecurity, malicious code, npm library, open-source software, private keys, Solana, supply chain attack

Researchers Discover Security Flaw in Solana’s Web3.js npm Library: Risks and Solutions Explored

Cybersecurity experts have identified a serious software supply chain attack affecting the popular @solana/web3.js npm library, which has over 400,000 weekly downloads. Malicious versions 1.95.6 and 1.95.7 were found to contain harmful code designed to steal users’ private keys and drain cryptocurrency wallets. The threat likely originated from a phishing incident that compromised maintenance accounts, ...