Lottie Player npm package compromised for crypto wallet theft

2024-10-31来源 Snyk BlogEnglish
Lottie Player npm package compromised for crypto wallet theft
On October 31st, 2024, another package compromise and cryptocurrency hijack story unfolded for a popular npm package. Scan open source dependencies and container images in the CLI or your SCM with Snyk to determine if you're using one of the vulnerable versions of lottie-player, and potentially uncover any other security vulnerabilities you may have in your projects.

原文：https://www.a8q9.cn/en/article/lottie-player-npm-package-compromised-for-crypto-wallet-theft-861b8f.html

相关文章