Skip to content
XRP supply chain attack: Official NPM package infected with crypto stealing backdoor
aikido.dev | incident | #supply-chain | #cryptocurrency | #npm | #aikido | #backdoor | #supply-chain-attack | #private-keys | #aikido-intel | #xrpl | #npm-malware | #wallet-keys
Summary
The official xrpl npm package, XRP Ledger's SDK with 140,000 weekly downloads, was backdoored via unauthorized releases to steal wallet private keys whenever a Wallet object was instantiated.
- Published
- Collected