Tag: npm package

1 Attack Reports | 0 Vulnerabilities

Attack reports

Uncovering a Web3 Interview Scam

A Ukrainian Web3 team's interview process involved cloning a GitHub repository containing malicious components. Analysis revealed the project replaced a legitimate dependency with a malicious NPM package, rtk-logger@1.11.5. This package collected sensitive data, including cryptocurrency wallet info…
malware
cryptocurrency
data theft
github
web3
2025-08-13
redux-ace
rtk-logger
npm package
interview scam
Published: August 13, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports