EN PT-BR
← Voltar ao feed
high

Compromised bee-js and Swarm Desktop Steal Swarm Wallet Keys

1 fonte(s) · 1 atualização(ões) · publicado 08/11/2026 21:00 · coletado há 1 hora

@ethersphere/bee-js is the JavaScript client for the Swarm storage network. Version 13.3.0 runs attacker code on install. A new postinstall hook downloads a second stage that steals the Swarm node’s wallet key and installs a backdoor. On Linux and macOS, the backdoor is a Go remote shell. On Windows, it is a hidden ScreenConnect client that runs as SYSTEM.

30 minutes later, the attacker put the same malicious code in Swarm Desktop 0.56.2.

Linha do tempo

  1. safedep.io ↗ · pub. 08/11/2026 21:00 · coletado 09/11 05:00 primeiro registro

    Compromised bee-js and Swarm Desktop Steal Swarm Wallet Keys

    ler a análise desta fonte

    @ethersphere/bee-js is the JavaScript client for the Swarm storage network. Version 13.3.0 runs attacker code on install. A new postinstall hook downloads a second stage that steals the Swarm node’s wallet key and installs a backdoor. On Linux and macOS, the backdoor is a Go remote shell. On Windows, it is a hidden ScreenConnect client that runs as SYSTEM.

    30 minutes later, the attacker put the same malicious code in Swarm Desktop 0.56.2.