PANews reported on September 9th that according to Scam Sniffer, a phishing attack targeting well-known developer qix resulted in malicious code being injected into npm packages, including chalk, strip-ansi, and color-convert. The attack involved hooking wallet functionality, tampering with ETH/SOL transaction recipient addresses, and replacing addresses in network responses. Users are advised to always verify the recipient and amount in the wallet interface, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value transactions.
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact
[email protected] for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.