The supply-chain attack targeted solana-web3.js, a collection of JavaScript code used ... The backdoor came in the form of code that collected private keys and wallet addresses when apps that ...

The recommended Ripple cryptocurrency NPM JavaScript library named "xrpl.js" was compromised to steal XRP wallet seeds and private keys and transfer ... Malicious code was added to versions ...