Zachxbt2026-07-08 16:20:15Zachxbt Ties $12.38 Million Crypto Drain to Lastpass Breach: Over 100 Wallets CompromisedBlockchain investigator Zachxbt reveals that hackers linked to the 2022 Lastpass breach have stolen $12.38 million from over 100 victimized wallets, swapping stolen funds for ETH and then BTC via instant exchanges.420
npm supply ch2026-07-01 12:31:27SlowMist Security Alert: npm Supply Chain Attack Uses Fake Trading Bot Repos to Deploy 30 Malicious Packages Stealing Wallet Private Keys and Seed PhrasesSlowMist has issued a security alert regarding a coordinated malicious npm supply chain attack. Attackers leveraged fake trading bot repositories and DeFi-themed npm packages to distribute JavaScript infostealers, involving 30 malicious packages. Among them, stake-math@3.5.4 was locked as a dependency in the donoaccestag/forex-mt5-trading-bot repository, which has approximately 2,300 highly homogeneous batch-generated forks concentrated under the poly-stocks account. The stolen data includes crypto wallet libraries, browser cookies and passwords, browsing history, developer credentials, shell history, password manager databases, private keys, seed phrases, and exposed API tokens. SlowMist recommends developers immediately remove affected packages, rotate all exposed credentials, and rebuild environments from clean images.1890
