-
Key takeaways
The recent attack on the Node Package Manager (NPM) packages of a well-known developer, Josh Junon, known as "qix," has been described as likely the "largest supply chain attack."
The exploit, which put millions of crypto users at risk, is being closely monitored, and users are advised to take extreme caution.
Here is what happened
An NPM is a large warehouse of free building blocks used to create software applications. It is the default package manager for Node.js, used to install, manage, and share reusable code packages for JavaScript projects.
It is quite likely that you are interacting with an NPM while dealing with crypto apps or wallets.
As the software security firm ReversingLabs revealed, hackers used open-source code to conceal malware within Junon's NPM packages.
Junon listed 18 packages that got affected by the exploit. Notably, these packages get downloaded around two billion times each week.
More News:
Here's how much crypto got stolen
The malware in these NPM packages can attack crypto transactions on several leading blockchains, such as Bitcoin, Ethereum, Solana, and Tron. But it turns out the exploit didn't succeed in stealing a significantly high amount of crypto assets.
Crypto intelligence platform Security Alliance released a report on Sep. 8 to reveal that Ethereum and Solana wallets have been major targets of the breach.
However, the hacker seems to have pocketed only $50 of assets, it revealed.
Nonetheless, it is a developing situation and the hack could get more damaging.
This article has been published in thestreet.com via Yahoo News.
Massive NPM crypto hack drained only $50
The NPM attack was quite likely the "largest supply chain attack."
finance.yahoo.com
