Security firm: NPM supply chain attacked, developer qix affected

ChainCatcher news, according to market sources, well-known developer qix suffered a phishing attack that resulted in npm packages being injected with malicious code. Affected packages include chalk, strip-ansi, color-convert, and others.

The attack methods include hooking wallet functions, tampering with ETH/SOL transaction receiving addresses, and replacing addresses in network responses. User recommendations: Always verify the recipient and amount in the wallet interface, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value operations.