Node wallet key may have been compromised, and the Swarm development package and desktop client have been poisoned

Odaily Planet Daily News: According to Socket monitoring, the development team of the decentralized storage project Swarm, Ethersphere, suffered a supply chain attack. On November 9, attackers released a malicious version of bee-js 13.3.0 on npm and pushed it through automatic updates to implant malware into Swarm Desktop 0.56.2. The malicious code reads Bee node configuration files and encrypted wallet keystores, then sends them back to the attacker. Since the configuration files store keystore passwords in plaintext, node wallets may be exposed; the malicious code also installs a remote control backdoor on the device. Currently, the affected version has been removed from npm, and Ethersphere has withdrawn the related desktop client versions. No confirmed fund losses have been reported so far.