Hackers Compromise Ethersphere’s bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

Attackers used stolen CI credentials and Ethersphere’s own release automation to publish malicious versions of bee-js 13.3.0 and Swarm Desktop 0.56.2, which download code designed to steal the Swarm node’s wallet key and its stored password and install a backdoor on Windows, macOS and Linux. Both releases have been withdrawn and a clean Swarm Desktop 0.56.3 issued, but maintainers warn that any machine that ran the malicious versions should be treated as compromised.