URL has been copied successfully!
npm Package Lottie-Player Compromised in Supply Chain Attack
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

npm Package Lottie-Player Compromised in Supply Chain Attack

by

Andy Stern
in

Tags: , , ,

npm package @lottiefiles/lottie-player hacked with malicious code, draining crypto wallets via web3 pop-ups

First seen on infosecurity-magazine.com

Jump to article: www.infosecurity-magazine.com/news/npm-package-lottieplayer-supply/

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Lottie-Player Supply Chain Attack Targets Cryptocurrency Wallets
  2. Over 380,000+ Hosts Embedding Polyfill JS script Linking to Malicious Domain
  3. New R Programming Vulnerability Exposes Projects to Supply Chain Attacks
  4. Trojanized jQuery Packages Spread via ‘Complex’ Supply Chain Attack