Tag: dydx-v4-client
-

Surgical Strike on DeFi: How Hijacked dYdX Packages Drained Wallets via npm and PyPI
Security analysts at Socket have unmasked a surgical supply chain incursion targeting the libraries associated with the dYdX cryptocurrency exchange. Malicious iterations of client packages manifested simultaneously within the npm and PyPI repositories following the compromise of a maintainer’s credentials. These subverted builds were engineered to exfiltrate cryptocurrency wallet data and facilitate the clandestine execution…