According to the Socket security research team, on November 9th, attackers used a compromised GitHub account and Ethersphere's automated deployment process to release malicious code-injected versions of @ethersphere/bee-js 13.3.0 and Swarm Desktop 0.56.2. This malicious code could steal Swarm node wallet keys and passwords and deploy a remote control backdoor on user devices. Research revealed that this attack used the same Ethereum smart contracts and backdoor components as the previous SleepyDuck/EtherDuck attack campaign, obtaining the control server address through on-chain contracts. The two malicious versions were removed approximately 75 minutes and 8.5 hours after deployment, respectively; the actual number of affected users is currently unclear. [https://wublock123.com)/news/socket-ethersphere-software-supply-chain-compromise-steals-wallet-keys-71620]