According to ChainCatcher, the official XRPL NPM package was found to have a security vulnerability by the cryptographic security research institution Aikido Security. The backdoor program steals user private keys and sends them to the attacker. The affected versions are 4.2.1 to 4.2.4, and Aikido Security recommends that users of earlier versions should not upgrade at this time.
Aikido Security: A backdoor was found in the XRPL NPM package to steal private keys, and versions 4.2.1-4.2.4 were affected
This article is machine translated
Show original
Source
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments
Share
