· javascript
Ethersphere releases bee-js 13.3.0, Swarm Desktop 0.56.2 with wallet-stealing malware
Malicious code designed to steal wallet keys and install a backdoor was distributed through compromised releases of two key tools for the Swarm decentralized storage network: bee-js version 13.3.0…
Malicious code designed to steal wallet keys and install a backdoor was distributed through compromised releases of two key tools for the Swarm decentralized storage network: bee-js version 13.3.0 and Swarm Desktop version 0.56.2. Attackers leveraged the Ethersphere project's internal release automation process to push these harmful versions out. These compromised releases contain code engineered to extract the wallet key that Swarm Desktop saves for its node, alongside the password needed to access it.
