Security · High impactFan score 47 · Tier B
@ethersphere/bee-js 13.3.0 Compromised
The Brief
- @ethersphere/bee-js version 13.3.0 is reported as compromised.
- Malicious install-time code targets Swarm wallet data.
- The malware attempts to establish persistent access on affected systems.
Why it matters
Developers who installed @ethersphere/bee-js 13.3.0 may have had Swarm wallet data exposed and may have persistent access on their systems.
Who’s affected
- Anyone who installed @ethersphere/bee-js 13.3.0
What to do
- Check whether projects or build machines have @ethersphere/bee-js 13.3.0 installed
- @ethersphere/bee-js 13.3.0
- #npm
- #supply-chain
- #malware
- #swarm
- #javascript
@ethersphere/bee-js 13.3.0 is compromised. Malicious install-time code targets Swarm wallet data and attempts to establish persistent access on affected systems.
Timeline
Step Security reports @ethersphere/bee-js 13.3.0 is compromised
Step Security Blog
@ethersphere/bee-js 13.3.0 Compromised