Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

Hackers compromised the Ethersphere project's release automation to publish malicious versions of bee-js and Swarm Desktop tools. The malicious versions, bee-js 13.3.0 and Swarm Desktop 0.56.2, are designed to download and run code that steals wallet keys and stored passwords. This code targets the wallet key used by Swarm Desktop for its node, as well as the password that unlocks it. Additionally, the malicious code installs a backdoor, potentially allowing for further unauthorized access. The attack leverages the project's own release process to distribute the malware.