Massive NPM Supply Chain Attack Hits Crypto Wallets

Massive NPM supply chain attack has affected crypto wallets, with hackers manipulating the Node Package Manager ecosystem by pushing malicious updates into 18 packages that together see more than two billion downloads every week. The malicious code was designed to target crypto wallets; when a user approves a transaction, it silently replaced the recipient’s address with one controlled by the attackers, making the theft invisible to the user as the wallet interface appeared normal.

The attack stemmed from phishing that compromised a maintainer account, allowing attackers to inject the tainted updates into popular packages such as chalk, debug, and ansi-styles. A quick response significantly limited the damage, and sources say the impact was contained with almost no victims.

According to The Block, Ledger’s chief technology officer Charles Guillemet said the supply-chain attack “fortunately failed,” with “almost no victims” after the phishing campaign and subsequent shutdown of the malicious updates.