NPM Developer Account Attacker Currently Suspected to Have Profited Only Around $20

By: theblockbeats.news|2025/09/09 10:42:44

BlockBeats News, September 9th, according to CertiK Alert monitoring, developer Qix's NPM account was targeted in a phishing attack, with the attacker injecting malicious code into npm. According to Security Alliance, the attacker seems to have only profited about 0.05 USD worth of ETH and 20 USD worth of Meme coin.

Previously reported, Ledger CTO Charles Guillemet posted, "A large-scale supply chain attack is currently taking place: a well-known developer's NPM account has been compromised. The affected package has been downloaded over 1 billion times, which means the entire JavaScript ecosystem may be at risk. The malicious code works by silently modifying cryptocurrency addresses in the background to steal funds."

-- Price

In the current context of tightening global regulations, if one can directly enter the market with a partner that has already established a compliance system, obtaining federal license endorsement, the credibility of a listed company, and access to banking cooperation channels, the cost is merely gi...

A Brief History and Future of Perpetual Contracts

Decentralized perpetual contract exchanges, such as Hyperliquid, are replacing traditional derivatives with structural advantages, becoming trillion-dollar financial platforms that attract global assets.

AI Agent Gets ID and Wallet on the Same Day | Rewire News Morning Brief

Agent infrastructure for the economy is forming faster than anyone expected

IOSG: Power Flexibility Paradigm Shift: From Macro Assets to Distributed Intelligence Layer

The power system is being asked to perform a task it was not designed to do.

Murata 35% Price Increase Explained: A Capacitor that Gives AI Empire a Cold

Choosing to raise at this point in time has a clear financial incentive

MiniMax: A Henan County Youth and His 300 Billion

Money, cards, and people were scarce, yet it spurred the highest levels of engineering prowess and architectural innovation.

From Abandoned Project to Sky-High Target, Mastercorp Acquires BVNK for $1.8 Billion

The stablecoin is no longer a competitor to the card networks, but has instead been assimilated into its underlying network as a highly complementary business subset.

Is Polymarket's Pricing Accurate? I Simulated a Crisis with 200 Agents to Find Out

The more participants, the richer the discussion structure, and the more valuable the resulting signal.

A Decade of Regulation Finally Clarified, Victory for Crypto-Native Logic

Three Charts to Explain What's in This 68-Page Document

The United States Establishes the "Five Categories Law" for Cryptographic Assets: A Summary to Understand the New Regulatory Framework

Is the "Wild West" era of cryptocurrency assets officially coming to an end?

Morning Report | Mastercard plans to acquire BVNK for up to $1.8 billion; Solana Foundation launches aggregator Tokens on Solana; Bitcoin sees its first 8 consecutive rises in four years

Overview of Important Market Events on March 17

Aster Chain officially launches: defining a new era of on-chain privacy and transparency

The privacy-focused trading ecosystem Aster, supported by YZi Labs, announced today that the Aster Chain mainnet is officially launched.

Stargate Debut Illustrated: The 1.4 Trillion Computing Power Empire Dream, Awakened

One Year Plus, Zero Employees, Zero Code