ALERT: Ripple’s xrpl.js Compromised – Hackers Steal Crypto Keys in Massive Supply Chain Attack

A supply chain attack has compromised the xrpl.js library, a widely-used JavaScript API for XRP Ledger blockchain interactions. Malicious code in versions 4.2.1-4.2.4 and 2.14.2 was designed to steal cryptocurrency private keys and transmit them to an external domain. The attack began Apri...