Node-ipc Faces Another Security Breach with Malicious Versions Released

CoinLive
2026.05.15 00:53
Node-ipc has been compromised again, according to ChainCatcher. The Chief Information Security Officer of SlowMist, 23pds, revealed on the X platform that three malicious versions of node-ipc (9.1.6, 9.2.3, and 12.1) have been released. These versions contain identical credential-stealing payloads and have a weekly download count exceeding 10 million.