# SlowMist Team Warns Ethersphere npm Package Was Compromised

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/53651
Published: 2026-11-11T06:43:13.000Z
Updated: 2026-11-11T06:43:13.000Z
Section: Technology

> The team said compromised GitHub accounts spread code across multiple operating systems and urged users to upgrade to version 0.56.3.

SlowMist Team warned that an Ethersphere npm package was compromised in a supply-chain attack, putting users of the affected release at risk from malicious code. Users were urged to remove the release and upgrade to version 0.56.3.

The attack used compromised GitHub accounts to distribute the code across multiple operating systems, the team said. The malicious payload can execute JavaScript remotely, creating risks that include wallet credential theft and unauthorized access to user systems.

SlowMist Team also advised users to check their systems for possible compromise and rotate credentials. Those actions address the concerns identified in the warning: malicious code on affected systems and possible exposure of wallet or account credentials.

Ethersphere develops decentralized storage software for the Ethereum network through its Swarm platform. The incident centers on a software package and the development accounts used to distribute it, making package removal and an upgrade to version 0.56.3 the concrete steps outlined for users.