Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
ioc.exchange is one of the many independent Mastodon servers you can use to participate in the fediverse.
INDICATORS OF COMPROMISE (IOC) InfoSec Community within the Fediverse. Newbies, experts, gurus - Everyone is Welcome! Instance is supposed to be fast and secure.

Administered by:

Server stats:

1.5K
active users

ioc.exchange: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.4

#ripple

16 posts9 participants0 posts today
Public
Efani

🚨 One of the most downloaded XRP libraries on npm was backdoored to steal private keys — and most developers didn’t see it coming.

Ripple’s `xrpl.js` library was compromised in a sophisticated supply chain attack that inserted a malicious function to exfiltrate crypto wallet secrets to an external domain.

What happened:
- The backdoor was added in npm versions 4.2.1 through 4.2.4 and 2.14.2
- Malicious code was introduced via a compromised Ripple developer’s npm account
- The attacker used a function called `checkValidityOfSeed` to quietly steal private keys
- The GitHub repo was untouched — only the npm package was altered
- Updated safe versions: 4.2.5 and 2.14.3 ✅

📦 With nearly 3 million total downloads and 135K+ weekly users, this was a high-value target — and a clear reminder of just how fragile open-source dependencies can be in the Web3 ecosystem.

Security reminders for devs working in crypto or blockchain:
- Rotate secrets if you used affected versions
- Always lock package versions in production
- Set up alerts for unusual package versioning behavior
- Use 2FA and scoped tokens on npm accounts
- Treat libraries like any other third-party threat surface

This wasn’t a bug. It was a breach — inside the supply chain. And it could have quietly drained wallets at scale.

🔐 In Web3, your dependencies are your perimeter.

#CyberSecurity#Ripple
Public
Crypto News

Analyst Predicts XRP Price Rally To $2.70 Looms As Ripple Network Activity Jumps 70% - A renowned crypto market analyst has predicted that XRP price is eyeing a rally to $2.70 ... - coingape.com/analyst-predicts- #24/7cryptocurrencynews #altcoinnews #xrpprice #ripple #xrp

CoinGape · Analyst Predicts XRP Price Rally To $2.70 Looms As Ripple Network Activity Jumps 70%By Coingape Staff
Public
Crypto News

John Deaton Expresses Surprise At Ripple’s Exclusion As Crypto Firms Look To Apply For Bank Licenses - Former Senatorial candidate and pro-XRP lawyer John Deaton has commented on a recent repo... - coingape.com/john-deaton-expre #24/7cryptocurrencynews #johndeaton #coinbase #circle #ripple #bitgo

CoinGape · John Deaton Expresses Surprise At Ripple’s Exclusion As Crypto Firms Look To Apply For Bank LicensesBy Boluwatife Adeyemi
ExploreLive feeds
About