Malicious software packages published on software repositories have compromised the cryptocurrency wallets of dYdX users, and a suicide bombing at a mosque in Islamabad killed 31 people, according to reports. The compromised packages, which stole wallet credentials, affected applications using the npm versions, putting both developers and end-users at risk, security researchers said Friday. Meanwhile, the deadly attack in Pakistan's capital, the deadliest in over a decade, injured more than 170 others, authorities reported.
The cryptocurrency theft stemmed from open source packages published on the npm and PyPI repositories. These packages were laced with code designed to steal wallet credentials from dYdX developers and backend systems, and in some cases, backdoored devices, according to security firm Socket. The firm stated that the direct impact included complete wallet compromise and irreversible cryptocurrency theft. The affected packages included npm (dydxprotocolv4-client-js): 3.4.1 and 1.22.1.
The suicide bombing in Islamabad occurred at a mosque, resulting in 31 fatalities and over 170 injuries. This attack is the deadliest in Islamabad in more than a decade, following a previous blast outside a courthouse that killed 12 people, according to NPR.
In other news, the British government found itself at the center of a political storm following the release of files connected to the U.S. investigations into Jeffrey Epstein, according to Time. Disclosures from the Epstein investigation have already impacted the monarchy, with Prince Andrew stripped of his royal title.
Additionally, Haitians in America are expressing concerns about potential actions from former President Donald Trump. Trump falsely accused Haitians in Ohio of eating pets and has previously described Haiti with derogatory language, according to Vox.
Discussion
AI Experts & Community
Be the first to comment