logo

Security Advisory: Another well-known developer's NPM account has been compromised, injecting wallet-stealing malware

By: theblockbeats.news|2025/09/10 00:02:41
0
Share
copy
when-vipwhen-vip

BlockBeats News, September 9th. According to Socket monitoring, the ongoing NPM supply chain attack has spread from the well-known developer Qix to another highly prominent maintainer. The NPM account duckdb_admin, responsible for the DuckDB-related package, has been compromised, and multiple malicious versions have been published. The injected code is the same wallet-stealing malware used when Qix's account was compromised, strongly indicating that both are part of the same attack campaign.

Previously reported, Ledger's CTO stated that in the event of a large-scale supply chain attack, the entire JavaScript ecosystem could be at risk. However, the NPM attackers were not successful, and there were almost no victims.

-- Price

--

You may also like

How to balance risk and return in DeFi yields?

Have these yields ever been reasonable? Have we ever received the compensation we deserve for the risks taken in DeFi, and where should the future spreads be set?

Tom Lee's Ethereum Thesis: Why the Man Who Called the Last Cycle Is Doubling Down on Bitmine

Tom Lee is emerging as one of Ethereum’s most influential supporters. From Fundstrat to Bitmine, his Ethereum thesis combines staking yield, treasury accumulation, and long-term network value. Here is why “Tom Lee Ethereum” has become one of crypto’s most watched narratives.

Naval personally takes the stage: The historic collision between ordinary people and venture capital

Naval personally stepped in as the chairman of the USVC Investment Committee. This SEC-registered fund launched by AngelList attempts to bring top private tech assets like OpenAI, Anthropic, and xAI to the general public with a $500 entry threshold. It is not just a new fund, but a structural experi...

a16z Crypto: 9 Charts to Understand the Evolution Trends of Stablecoins

Stablecoins are evolving from trading tools into universal payment infrastructure, and this process is quieter and more thorough than most people expected.

Refutation of Yang Haipo's "The End of Cryptocurrency"

This may be the true test of cryptocurrency. It's not about whether the price has reached a new high, nor about who will achieve financial freedom in the next bull market, but rather whether, after all the grand narratives have been washed away by cycles, it can still leave behind some simpler, more...

Can a hairdryer earn $34,000? Interpreting the reflexivity paradox of prediction markets

Prediction markets are essentially betting on reality, and when participants can access or even influence this path earlier, the market no longer just reflects reality but begins to shape it in return.
The Joker is back
Bigger pools, auto-play, lucky buffs.
The Joker is backJoin now and grab your rewards.

Contents

Popular coins

Latest Crypto News

06:42

U.S. stock index futures opened slightly lower on Monday, down 0.2%

According to Jinshi reports, the three major U.S. stock index futures opened slightly lower by 0.2% on Monday.
06:42

The probability of the Federal Reserve keeping interest rates unchanged in April is 100%, while the probability of a rate cut in June is only 4.7%

According to Jinshi reports, CME's "FedWatch" shows that the probability of the Federal Reserve keeping interest rates unchanged in April is 100%. In addition, the probability of the Federal Reserve cumulatively cutting rates by 25 basis points by June is 4.7%, while the probability of keeping rates...
04:42

Data: In the past 24 hours, the total liquidation across the network was 111 million USD, with long positions liquidated at 27.192 million USD and short positions liquidated at 84.1511 million USD

According to Coinglass data, in the past 24 hours, the total liquidation across the network was $111 million, with long positions liquidated at $27.192 million and short positions liquidated at $84.1511 million. Among them, Bitcoin long positions were liquidated at $1.585 million, Bitcoin short posi...
BTCBTC
--
ETHETH
--
03:42

The U.S. bond market is focused on the Federal Reserve meeting, with the probability of a rate cut by the end of the year rising to 40%

According to Jinshi reports, as the situation in the Middle East drives up oil prices, traders in the U.S. Treasury market are closely monitoring this week's Federal Reserve meeting to assess officials' views on the inflation outlook. The market generally expects the Federal Reserve to maintain inte...
02:42

Data: If BTC falls below $74,246, the cumulative long liquidation intensity on mainstream CEX will reach $972 million

According to Coinglass data, if BTC falls below $74,246, the cumulative long liquidation intensity on mainstream CEX will reach $972 million. Conversely, if BTC breaks above $81,462, the cumulative short liquidation intensity on mainstream CEX will reach $836 million.
Read more
Community
iconiconiconiconiconiconicon

Customer Support Bot：@WEEX_support_smart_Bot

VIP Services：support@weex.com