TRUST WALLET CHROME EXTENSION HACK DRAINS $8.5M VIA SHAI-HULUD SUPPLY CHAIN ATTACK

Summary from the TLDR InfoSec newsletter

Trust Wallet disclosed that the second iteration of the Shai-Hulud supply chain attack in November compromised its Google Chrome extension, resulting in the theft of approximately $8.5 million in cryptocurrency assets. The attack leveraged malicious packages published to npm and PyPI, compromising developer environments and enabling attackers to insert malicious code into the extension for wallet credential theft.