The post Ledger CTO Warns of Supply Chain Attack Risk appeared on BitcoinEthereumNews.com.

Key Points: A major supply chain attack is impacting JavaScript ecosystems. Vulnerable if using software wallets without verification. Community urged to stop non-hardware wallet transactions. Ledger CTO Charles Guillemet revealed a substantial supply chain attack on September 9, targeting popular JavaScript/NPM packages to alter cryptocurrency addresses and potentially steal funds. This highlights significant risks to the cryptocurrency ecosystem, particularly for software wallet users, urging a shift towards verified transaction practices with hardware wallets to prevent financial loss. Ledger CTO Reports Major NPM Compromise On September 9th, Ledger’s CTO Charles Guillemet reported a large-scale supply chain attack affecting the JavaScript/NPM ecosystem. The attack involved a compromised NPM account of a well-known developer, raising concerns of widespread crypto security risks. By altering cryptocurrency addresses, these security threats escalate. Guillemet emphasized the safety of using hardware wallets. Such wallets require users to verify transaction signatures, limiting the risk of illicit fund transfers. Users relying on software wallets face a heightened risk of mnemonic phrase exposure, underscoring the need for immediate vigilance and response. “A large-scale supply chain attack is currently taking place: a well-known developer’s NPM account has been compromised. The affected package has been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk. The malicious code works by silently altering a cryptocurrency address in the background to steal funds. If you use a hardware wallet, please carefully verify each transaction signature, and you are safe. … If you do not use a hardware wallet, please refrain from making any on-chain transactions for now.” — Charles Guillemet, Chief Technology Officer, Ledger Historical Attacks Highlight Urgent Need for Security Did you know? Similar supply chain attacks have led to significant cryptocurrency thefts, highlighting the need for robust security measures and vigilant transactions, especially for millions using non-hardware wallets globally.…

---

Filed under: News - @ September 9, 2025 1:29 am