@dfbcsdc
A malicious package impersonating a dYdX crypto tool was found.
It targeted developers using the exchange's API.
Once installed, it could steal funds from connected wallets.
This highlights the risks in open-source software supply chains.
Always verify the source of code you install.
0 reply
0 recast
0 reaction