Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnWeb3SquareMore
Trade
Spot
Buy and sell crypto with ease
Margin
Amplify your capital and maximize fund efficiency
Onchain
Going Onchain, without going Onchain!
Convert & block trade
Convert crypto with one click and zero fees
Explore
Launchhub
Gain the edge early and start winning
Copy
Copy elite trader with one click
Bots
Simple, fast, and reliable AI trading bot
Trade
USDT-M Futures
Futures settled in USDT
USDC-M Futures
Futures settled in USDC
Coin-M Futures
Futures settled in cryptocurrencies
Explore
Futures guide
A beginner-to-advanced journey in futures trading
Futures promotions
Generous rewards await
Overview
A variety of products to grow your assets
Simple Earn
Deposit and withdraw anytime to earn flexible returns with zero risk
On-chain Earn
Earn profits daily without risking principal
Structured Earn
Robust financial innovation to navigate market swings
VIP and Wealth Management
Premium services for smart wealth management
Loans
Flexible borrowing with high fund security
Watch Out: Virus Detected in Software Downloaded Over 1 Billion Times, Theft Alert for Cryptocurrency Owners

Watch Out: Virus Detected in Software Downloaded Over 1 Billion Times, Theft Alert for Cryptocurrency Owners

CryptoNewsNetCryptoNewsNet2025/09/08 20:57
By:en.bitcoinsistemi.com

Ledger's CTO, Charles Guillemet, warned of a large-scale cyberattack that could directly impact the cryptocurrency market.

“A respected developer's NPM account was compromised, and packages distributed through that account have been downloaded over 1 billion times. This puts the entire JavaScript ecosystem at risk,” Guillemet said.

According to details of the attack, the malware attempts to steal users' funds by silently changing crypto addresses. This method, known as a “crypto-clipper,” specifically targets software wallet users.

Guillemet argued that hardware wallet users are safe if they carefully check addresses before signing transactions, but software wallet users should avoid on-chain transactions for now. It's also unclear whether attackers are directly stealing seed phrases from software wallets.

Here are some suggestions for developers:

  • Fix the error-ex package to version 1.3.2 (using the overrides property in package.json).
  • Prefer npm ci command instead of npm install in your build processes.
  • Be sure to check the addresses before making any transactions.
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops
Lock your assets and earn 10%+ APR
Lock now!

You may also like

From Tenant to Broker: The Crypto Business in Trump Tower

Living below the seat of power, let the elevator of wealth go straight to your own office.

深潮2025/09/10 03:30
From Tenant to Broker: The Crypto Business in Trump Tower

"Seizing Power" from the Federal Reserve: US Treasury Secretary Calls for Comprehensive Review of the Fed

Besant's opinion piece appears to indicate that the Trump administration's criticism of the Federal Reserve is escalating—not only demanding interest rate cuts, but also beginning to question the Fed's overall operational model and its foundation as an independent institution.

深潮2025/09/10 03:29

Breaking Down the Walled Garden: How Does Ondo Global Market Bring 100+ US Stocks On-Chain?

Make financial markets truly globalized, democratized, and programmable.

深潮2025/09/10 03:07
Breaking Down the Walled Garden: How Does Ondo Global Market Bring 100+ US Stocks On-Chain?