News for hackers. Stuff that matters.

A comment on Offical XRP NPM package has been compromised and key stealing malware introduced.

Re:Offical XRP NPM package has been compromised and key stea... by MichealCodes on Tuesday April 22, 2025 @08:17AM (#43761252)
Cryptocurrency packages used at scale should have wallet decoys setup for early detection of vulnerabilities like this.
[ Parent | on HN ]
Re:Offical XRP NPM package has been compromised and key stea... by nailer on Tuesday April 22, 2025 @10:06AM (#43762360)
Red teaming this, you’d delay exfiltration of the private key until the balance passes beyond a certain amount and you’re on mainnet.
[ Parent | on HN ]