#7
The Hacker News
general
November 09, 2026 at 17:36 UTC
Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware
By [email protected] (The Hacker News)
AI Summary
Attackers compromised Ethersphere's release automation pipeline to publish malicious versions of bee-js (13.3.0) and Swarm Desktop (0.56.2), injecting wallet-stealing malware that exfiltrates Swarm node wallet keys and stored unlock passwords, plus installs a backdoor. This is a supply chain attack via hijacked CI/CD release infrastructure targeting the decentralized storage ecosystem. Users of either package should consider their node credentials compromised and rotate keys immediately.
Relevance score: 81.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →