Node wallet keys may have been stolen; Swarm development packages and desktop client compromised

Odaily report: According to Socket monitoring, the development team Ethersphere behind the decentralized storage project Swarm has suffered a supply chain attack. On November 9, attackers published a malicious version bee-js 13.3.0 to npm and pushed a trojanized Swarm Desktop 0.56.2 through automatic updates. The malicious code reads Bee node configuration files and encrypted wallet keystores and sends them back to the attackers. Because the configuration files store the keystore password in plaintext, node wallets may be exposed as a result; the malicious code also implants a remote-control backdoor on devices. Currently, npm has removed that version, and Ethersphere has also withdrawn the related desktop version. No confirmed loss of funds has been reported so far.