Home / Nov 10, 2026 / Story
0
#7 The Hacker News general November 09, 2026 at 17:36 UTC

Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

By [email protected] (The Hacker News)

AI Summary

Attackers compromised Ethersphere's release automation pipeline to publish malicious versions of bee-js (13.3.0) and Swarm Desktop (0.56.2), injecting wallet-stealing malware that exfiltrates Swarm node wallet keys and stored unlock passwords, plus installs a backdoor. This is a supply chain attack via hijacked CI/CD release infrastructure targeting the decentralized storage ecosystem. Users of either package should consider their node credentials compromised and rotate keys immediately.

Relevance score: 81.0/100

# More from November 10