[Node Wallet Keys May Have Been Stolen; Swarm Development Kit and Desktop Client Poisoned] According to Odaily Planet Daily, Socket monitoring indicates that Ethersphere, the development team behind the decentralized storage project Swarm, has suffered a supply chain attack. On November 9th, attackers released a malicious version of bee-js 13.3.0 to npm and automatically pushed a malware-infected Swarm Desktop 0.56.2. The malicious code reads the Bee node configuration file and encrypted wallet keystore, then sends it back to the attackers. Because the configuration file stores the keystore password in plaintext, the node wallet may have been exposed; the malicious code also implanted a remote control backdoor on the device. Currently, npm has removed this version, and Ethersphere has also removed the relevant desktop client version. No confirmed financial losses have been reported so far.