According to SlowMist and security research firm Socket, the decentralized storage project Ethersphere suffered a software supply chain attack. Hackers compromised GitHub accounts and hijacked the official release process, injecting malicious code into the npm packages ethersphere/bee-js v13.3.0 and Swarm Desktop v0.56.2, affecting Windows, macOS, and Linux systems. The malware can steal users' wallet keys and credentials and dynamically obtain remote control (C2) server addresses through Ethereum smart contracts. This infrastructure was previously used for SleepyDuck/EtherDuck malware activities. Notably, the infected macOS installer still passed Apple's code signing and notarization. GitHub security advisories warn that devices with the affected versions should be considered compromised. https://(wublock123.com)/news/swarm-supply-chain-attack-ethereum-smart-contract-backdoor-key-leak-risk-71656