The legitimate Solana JavaScript SDK was temporarily compromised yesterday in a supply chain attack, with the library backdoored with malicious code to steal cryptocurrency private keys and drain wallets.
First seen on bleepingcomputer.com
Jump to article: www.bleepingcomputer.com/news/security/solana-web3js-library-backdoored-to-steal-secret-private-keys/