SlowMist Team Warns Ethersphere npm Package Was Compromised

SlowMist Team warned that an Ethersphere npm package was compromised in a supply-chain attack, putting users of the affected release at risk from malicious code. Users were urged to remove the release and upgrade to version 0.56.3.

The attack used compromised GitHub accounts to distribute the code across multiple operating systems, the team said. The malicious payload can execute JavaScript remotely, creating risks that include wallet credential theft and unauthorized access to user systems.

SlowMist Team also advised users to check their systems for possible compromise and rotate credentials. Those actions address the concerns identified in the warning: malicious code on affected systems and possible exposure of wallet or account credentials.

Ethersphere develops decentralized storage software for the Ethereum network through its Swarm platform. The incident centers on a software package and the development accounts used to distribute it, making package removal and an upgrade to version 0.56.3 the concrete steps outlined for users.