Solana supply chain attack contained, but users face six-figure losses

A supply chain attack on the Solana network ecosystem was quickly contained during the past day. On Dec. 3, Anza, a Solana-focused development team, revealed that an account with publish access to the solana/web3.js JavaScript library was compromised. This allowed the attacker to inject unauthorized packages containing malicious code that stole private key information and […]