< BACK TO NEWS
negativeSYS.SOURCE: The Hacker News• 2026-11-09T23:06:28+05:30

Malicious Code Injection in Ethersphere's bee-js and Swarm Desktop Targets Wallet Theft

Attackers exploited Ethersphere's release automation to distribute malicious versions of bee-js and Swarm Desktop, which steal wallet keys and install backdoors. The compromised tools target Swarm node credentials stored in Swarm Desktop.

Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2.

Both releases download and run code built to steal the wallet key that Swarm Desktop keeps for its node, along with the stored password that unlocks it. The code is also built to install a backdoor

Read original article

*** END OF TRANSMISSION ***