Loading...
The decentralized storage project Swarm's development team, Ethersphere, suffered a supply chain attack. On November 9th, the attackers released a malicious version of bee-js 13.3.0 to npm and automatically updated Swarm Desktop 0.56.2, which contained a malware infection. The malicious code read the configuration files and encrypted wallet keystores of Bee nodes and sent them back to the attackers. Because the keystore password is stored in plaintext in the configuration file, the node wallet is at risk of exposure, and the device is also vulnerable to remote control backdoors. This version has been removed from npm, and Ethersphere has withdrawn the relevant desktop version. No confirmed financial losses have been reported. Affected users are advised to uninstall the relevant version, generate new keys on a clean device, and transfer wallet funds and staked assets.