TLDR InfoSec · QUICK LINKS

MALICIOUS PACKAGES FOR DYDX CRYPTOCURRENCY EXCHANGE EMPTIES USER WALLETS

arstechnica.com4 min read

Summary from the TLDR InfoSec newsletter

Malicious npm and PyPI packages published through compromised official dYdX accounts exfiltrated wallet seed phrases and deployed a RAT backdoor, marking the third supply chain attack targeting the decentralized exchange.