Cybersecurity researchers have discovered a new supply chain attack in which legitimate packages on npm and the Python Package Index (PyPI) repository have been compromised to push malicious versions to facilitate wallet credential theft and remote code execution.
The compromised versions of the two packages are listed below -
@dydxprotocol/v4-client-js (npm) - 3.4.1, 1.22.1, 1.15.2, 1.0.31&
_811205.png)
_e196d8.png)
_32b3d9.png)
_1c53fe.png)
Recommended Comments
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.