The biggest npm attack in the history of code is stealing less than $50: seal

Hackers have only been able to steal $50 worth of crypto from a large supply chain hack that affects JavaScript software libraries, industry security researchers say.

The Crypto Intelligence Platform Security Alliance shared its findings on Monday after infiltrating well-known software developer Node Package Manager (NPM) accounts, adding malware to popular JavaScript libraries that have already been downloaded over a billion times, putting countless cryptographic projects at risk. According to the Security Alliance, Ethereum and Solana wallets were specifically targeted.

Luckily, under $50 has been stolen from the crypto space so far, the security company said it has identified the Ethereum wallet address “0xfc4a48” as it so far considered the only malicious address. Added to x:

“Imagine this: compromise NPM developer accounts where packages are downloaded more than 2 billion times a week. There is a possibility of free access to millions of developer workstations.

sauce: Security Alliance

However, the $50 figure hit a 5 cent few hours ago, suggesting that potential damage may still be unfolding.

The stolen 5 cents were ether (ETH), and another $20 worth of Memecoin has compromised, the Security Alliance said. Etherscan data shows that malicious addresses have received Brett (Brett), Andy (Andy), Dork Lord (Dork), Ethervista (Vista), and Gondola (Gondola) Memecoins so far.
Packages targeting violations such as Chalk, Strip-Ansi, and Color Convert are buried deep within the dependent tree with countless projects. Even developers who have never installed them directly can be exposed.

NPM is like an app store for developers. This is a central library that shares and downloads small code packages to build JavaScript projects.

It appears that the attacker has planted a crypto clipper. This is a type of malware that quietly replaces wallet addresses during transactions, and diverts funds.

Ledger’s Chief Technology Officer Charles Guillemet was among many who encouraged crypto users to proceed with caution when reviewing Onchain transactions.

This is a developing story, and more information will be added as it becomes available.