Hackers hijack Ethersphere’s bee-js package and Swarm Desktop app to push wallet-stealing malware
Not investment advice. Muhabbit scores how much a story may matter, not which way to trade.
Ethersphere disclosed that attackers compromised its bee-js JavaScript package and Swarm Desktop app to distribute wallet-stealing malware through official distribution channels. The breach highlights supply-chain risk in crypto tooling, where developers and users trust vendor-published packages and installers. Swarm’s BZZ token and the bee-js library underpin the project’s decentralized storage stack, so the hijack potentially exposed a broad set of downstream applications and wallets. Watch for the project’s post-mortem on how the packages were compromised, any republished signed releases, and whether other teams pin or audit their bee-js dependencies.
Muhabbit's AI wrote this summary in its own words from Crypto Briefing's report. It can get details wrong, so check the source.
Named in this story
Ethersphere, Swarm Desktop, bee-js, Swarm