- Protection Fund
  1,000 BTC Protection Fund to safeguard your assets
- Career
  Join WEEX and build the future with top experts
- WXT Zone
  Exclusive fee rates and free airdrops await
- Announcement Center
  Stay ahead with WEEX updates
- Elite Trader
  Share your strategies and earn rewards
- Crypto Wiki
  Master trading with simple trading guides for everyone
- Affiliate
  Unlock exclusive perks and high commissions
- Crypto News
  Stay on top of the latest crypto trends
- Official Verification
  Use official channels to protect your account
- VIP Perks
  Become a WEEX VIP today
- Events Calendar
  Discover highlights of WEEX's events around the world
Buy Crypto
- Quick Buy
  Buy with Visa, Mastercard, Apple Pay, Google Pay
- P2P Trading
  Buy crypto with 0 fees
Markets
Futures
- USDT-M Futures
  Perpetual futures settled in USDT
- Demo Trading
  USDT-M futures demo
- About Futures
  About futures trading features
- Leaderboard
  Current & past leaderboards
Spot
Copy Trade
WE-Launch

Scan to download
More options

Ledger CTO: Large-Scale Supply Chain Attack Underway, Entire JavaScript Ecosystem at Risk

By: theblockbeats.news|2025/09/08 21:02:00

BlockBeats News, September 9, Ledger's Chief Technology Officer Charles Guillemet wrote that, "A large-scale supply chain attack is currently taking place: a well-known developer's NPM account has been compromised. The affected package has been downloaded over 1 billion times, which means the entire JavaScript ecosystem could be at risk.

The malicious code works by silently tampering with cryptocurrency addresses in the background to steal funds.

If you use a hardware wallet, please carefully verify each signature transaction, and you are safe.
If you do not use a hardware wallet, please refrain from making any on-chain transactions for now.
It is currently unclear whether the attacker has already stolen the software wallet's mnemonic phrase.

For more details, see the report. If you are using Ledger or another hardware wallet that supports clear signatures, you will not be affected. My previous tweets were a reminder: Users who do not use hardware wallets that support clear signatures are at risk. Please be sure to carefully review each transaction before signing."

The OpenSea Foundation will announce SEA token TGE details in early October.

SwissBorg Suffers Hacker Attack, Loses Approximately $41 Million USD Worth of SOL