吴说获悉，据慢雾创始人余弦消息，@solana/web3.js 的 1.95.6 和 1.95.7 版本被发现存在供应链投毒问题，嵌入的后门代码会窃取用户私钥。虽然这两个 ...

The legitimate Solana JavaScript SDK was temporarily compromised yesterday in a supply chain attack, with the library backdoored with malicious code to steal cryptocurrency private keys and drain ...

Malware-poisoned versions of the widely used JavaScript library @solana/web3.js were distributed via the npm package registry, according to an advisory issued Wednesday by project maintainer ...