Ripple NPM supply chain attack hunts for private keys

Many versions of the Ripple ledger (XRPL) official NPM package are compromised with malware injected to steal cryptocurrency. The NPM package, xrpl, is a JavaScript/TypeScript library that devs use to interact with and build apps using the cryptocurrency ledger's features. This includes wallet and key management, payment …

[teknopaul]

Redacted

You are not allowed to sell your own projects on el reg (understandably) but this problem bagged me years so I wrote my own nom, simpler better And safer.

Can't tell you anything about it,but I cane be smug.

[An_Old_Dog]

Re: Redacted

I hope you are much-more-careful typing in your code than you are typing in your posts to The Register.

[teknopaul]

Just sayin

Is it me or is it often Npm caught in supply chain attacks?

Rarely Debian.

Apple makes the list...

shareware.com winrar.exe releases seemed to fair better.

<snark/>

[CowHorseFrog]

Re: Just sayin

Javascript is a class act all the way down and up.

So much is done so poorly, rush ahead without care or responsibility.