[Decentralized Storage Project Swarm Software Infiltrated with Malicious Code Stealing Wallet Data] According to a report by the security research team Socket on November 10th, attackers exploited Ethersphere's release process to implant malicious code into the npm package `@ethersphere/bee-js` 13.3.0 and the Swarm Desktop 0.56.2 desktop application. Socket's analysis states that the malicious loader downloads and executes remote code, and the subsequent payload reads the Swarm Desktop configuration file and node wallet keys. The affected desktop version was released through the project's own build process and had been provided to some users via automatic updates. npm has removed the affected package version.