PANews reported on September 9th that according to Scam Sniffer, a phishing attack targeting well-known developer qix resulted in malicious code being injected into npm packages, including chalk, strip-ansi, and color-convert. The attack involved hooking wallet functionality, tampering with ETH/SOL transaction recipient addresses, and replacing addresses in network responses. Users are advised to always verify the recipient and amount in the wallet interface, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value transactions.PANews reported on September 9th that according to Scam Sniffer, a phishing attack targeting well-known developer qix resulted in malicious code being injected into npm packages, including chalk, strip-ansi, and color-convert. The attack involved hooking wallet functionality, tampering with ETH/SOL transaction recipient addresses, and replacing addresses in network responses. Users are advised to always verify the recipient and amount in the wallet interface, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value transactions.

Security agency: NPM supply chain attacked, developer qix was compromised

2025/09/09 07:47
1 min di lettura
Per feedback o dubbi su questo contenuto, contattateci all'indirizzo crypto.news@mexc.com.

PANews reported on September 9th that according to Scam Sniffer, a phishing attack targeting well-known developer qix resulted in malicious code being injected into npm packages, including chalk, strip-ansi, and color-convert. The attack involved hooking wallet functionality, tampering with ETH/SOL transaction recipient addresses, and replacing addresses in network responses. Users are advised to always verify the recipient and amount in the wallet interface, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value transactions.

Disclaimer: gli articoli ripubblicati su questo sito provengono da piattaforme pubbliche e sono forniti esclusivamente a scopo informativo. Non riflettono necessariamente le opinioni di MEXC. Tutti i diritti rimangono agli autori originali. Se ritieni che un contenuto violi i diritti di terze parti, contatta crypto.news@mexc.com per la rimozione. MEXC non fornisce alcuna garanzia in merito all'accuratezza, completezza o tempestività del contenuto e non è responsabile per eventuali azioni intraprese sulla base delle informazioni fornite. Il contenuto non costituisce consulenza finanziaria, legale o professionale di altro tipo, né deve essere considerato una raccomandazione o un'approvazione da parte di MEXC.

USD1 Genesis: 0 Fees + 12% APR

USD1 Genesis: 0 Fees + 12% APRUSD1 Genesis: 0 Fees + 12% APR

New users: stake for up to 600% APR. Limited time!