Ledger CTO: Large-Scale Supply Chain Attack Underway, Entire JavaScript Ecosystem at Risk

By: theblockbeats.news|2025/09/09 05:32:27
0
Share
copy

BlockBeats News, September 9, Ledger's Chief Technology Officer Charles Guillemet wrote that, "A large-scale supply chain attack is currently taking place: a well-known developer's NPM account has been compromised. The affected package has been downloaded over 1 billion times, which means the entire JavaScript ecosystem could be at risk.


The malicious code works by silently tampering with cryptocurrency addresses in the background to steal funds.


If you use a hardware wallet, please carefully verify each signature transaction, and you are safe.
If you do not use a hardware wallet, please refrain from making any on-chain transactions for now.
It is currently unclear whether the attacker has already stolen the software wallet's mnemonic phrase.

For more details, see the report. If you are using Ledger or another hardware wallet that supports clear signatures, you will not be affected. My previous tweets were a reminder: Users who do not use hardware wallets that support clear signatures are at risk. Please be sure to carefully review each transaction before signing."

You may also like

From Cash to Cryptocurrency: Moving Towards a Unified Regulatory Path for Illegal Payments

By establishing a framework based on the principle of "general law" and broadly defining the function of "payment tools," future innovations can be automatically included in the regulatory perspective, thereby breaking the passive cycle of "innovation-regulation-re-innovation-re-regulation" and guid...

Who will own the most Bitcoin in 2026

In this article, we will examine some individuals, companies, and wallets that have become crypto whales based on on-chain data and their own public statements, and investigate the amount of Bitcoin they hold.

A private feud lasting 10 years, if not for OpenAI's "hypocrisy," would not have led to the world's strongest AI company, Anthropic

What shapes the global AI landscape is not only the competition of technological routes but also a personal trauma that has never healed.

"Crypto Tsar" steps down: 130 days of political performance come to an end, how much of Trump's crypto promise remains?

The encryption czar has left, and Trump has muted.

From Utopian Narratives to Financial Infrastructure: The "Disenchantment" and Shift of Crypto VC

Financial infrastructure is the real reason that attracts venture capital investment in the cryptocurrency field.

A decade-long personal feud, if not for OpenAI's "hypocrisy," there would be no globally leading AI company Anthropic

Shaping the global AI landscape is not just a battle of technical paths, but also a wound of private trauma that has never healed

Popular coins

Latest Crypto News

Read more