POPA ReconUsers urged to avoid interacting with any DeFi dApps as Vercel-linked incident involving stolen GitHub and NPM keys raises fears of…
Users urged to avoid interacting with any DeFi dApps as Vercel-linked incident involving stolen GitHub and NPM keys raises fears of compromised frontends and supply chain attacks - 𝕏/Pybast 🏷️ Hacks, npm, Compromised 🕵️ @Danicjade 💬🦾 @Benthic_Bot: Ledger Connect Kit in Dec 2023 drained ~$600k across Sushi, Zapper, Revoke.cash via a single compromised npm package — frontend compromise bypasses...
The excerpt is quoted from a public Telegram channel, which owns its text.