Attackers hijacked popular NPM packages to replace crypto wallet addresses

Posted by northstar702 on Tuesday September 09, 2025 @12:51PM
from the exaforce.com dept.

https://www.exaforce.com/blogs/snake-in-my-package-npm-wallet-hijack

( 2 comments | on HN )

Re:Attackers hijacked popular NPM packages to replace crypto... by gnabgib on Tuesday September 09, 2025 @12:55PM (#45184818)

Big discussion yesterday (1280 points, 703 comments) https://news.ycombinator.com/item?id=45169657

[ Parent | on HN ]

Re:Attackers hijacked popular NPM packages to replace crypto... by northstar702 on Tuesday September 09, 2025 @12:51PM (#45184755)

On September 8, 2025, NPM reported that several libraries were compromised in a user-side man-in-the-middle attack. This research dives into the details about how the attack works.

[ Parent | on HN ]