[Swarm SDK and Desktop Client Poisoned, Potentially Stealing Node Wallets] According to Foresight News, Socket monitoring indicates that Ethersphere, the development team behind the decentralized storage project Swarm, has suffered a supply chain attack. On November 9th, attackers released a malicious version of bee-js 13.3.0 to npm and automatically pushed a Trojan-infected Swarm Desktop 0.56.2. The malicious code reads the Bee node's configuration file and encrypted wallet keystore and sends it back to the attacker. Because the keystore password is stored in plaintext in the configuration file, the node wallet may be exposed, and a remote control backdoor is also implanted on the device. Currently, npm has removed this version, and Ethersphere has also removed the relevant desktop client version. No confirmed financial losses have been reported. Socket recommends that affected users uninstall the relevant version, generate new keys on a clean device, and transfer wallet funds and staking.