#Solana JavaScript SDK was temporarily compromised yesterday in a supply chain attack, with the library backdoored with malicious code to steal cryptocurrency private keys and drain wallets:
#SoftwareSupplyChainSecurity
https://www.bleepingcomputer.com/news/security/solana-web3js-library-backdoored-to-steal-secret-private-keys/
Sam Stepanyan :verified: 🐘 /
npub18d…rltg5
2024-12-04 20:19:22
Author Public Key
npub18d0arwv295u03fd825dvn5eharfx25rtrkemffxnar9dzn82drtssrltg5Published at
2024-12-04 20:19:22Event JSON
{
"id": "7433bc5038348aa540ca47c3d385bf95591f53834bb99e43f320726f3badf7f8",
"pubkey": "3b5fd1b98a2d38f8a5a7551ac9d337e8d265506b1db3b4a4d3e8cad14cea68d7",
"created_at": 1733343562,
"kind": 1,
"tags": [
[
"t",
"solana"
],
[
"t",
"SoftwareSupplyChainSecurity"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/113596403679770110",
"activitypub"
]
],
"content": "#Solana JavaScript SDK was temporarily compromised yesterday in a supply chain attack, with the library backdoored with malicious code to steal cryptocurrency private keys and drain wallets:\n#SoftwareSupplyChainSecurity\n\nhttps://www.bleepingcomputer.com/news/security/solana-web3js-library-backdoored-to-steal-secret-private-keys/",
"sig": "cd519ea4842710bb04031d06afdfece9c8b869bd62dc646aba113f7f9bed97987141b0baf5301cd7a75a6d462816463112912062f24946317b489aad6c1444ed"
}