Bitget App
Trade smarter
Security firm: NPM supply chain attacked, developer qix affected

Security firm: NPM supply chain attacked, developer qix affected

ChaincatcherChaincatcher2025/09/08 23:56
Show original

ChainCatcher news, according to market sources, well-known developer qix suffered a phishing attack that resulted in npm packages being injected with malicious code. Affected packages include chalk, strip-ansi, color-convert, and others.

The attack methods include hooking wallet functions, tampering with ETH/SOL transaction receiving addresses, and replacing addresses in network responses. User recommendations: Always verify the recipient and amount in the wallet interface, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value operations.

0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.