Major ENS and crypto libraries compromised in new NPM supply-chain attack

Aikido Security revealed that the Shai Hulud malware has infected over 400 NPM libraries, including crucial crypto packages associated with ENS. This malware poses a significant threat by autonomously spreading and stealing sensitive credentials.

Among those impacted, key crypto packages of ENS, like content-hash and address-encoder, experience tens of thousands of downloads weekly. Security specialists are raising alarms regarding the extensive reach and continuing nature of this attack.