
Malicious bee-js and Swarm Desktop releases steal node wallet keys
Stolen CI credentials published bee-js 13.3.0 and Swarm Desktop 0.56.2; both were withdrawn, and 0.56.3 is a clean rebuild.
2 stories, newest first · one card per story

Stolen CI credentials published bee-js 13.3.0 and Swarm Desktop 0.56.2; both were withdrawn, and 0.56.3 is a clean rebuild.

Socket found 19 malicious Chrome and Edge extensions, active since February 2024, stealing wallet seed phrases and credentials and draining crypto from about 80,000 users.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views