According to SafeDep, a security firm, malicious code hidden in version 14.4.2 of the fragment-api-py Python package stole cryptocurrency from user wallets between November 8 and 10. The package integrates with Telegram's Fragment trading platform. The attacker disguised the malicious code as a legitimate software update, automatically transferring GRAM and USDT balances to an attacker-controlled address when users ran the program with their wallet recovery phrase. At least two user wallets were confirmed compromised, with a total of 44.87 GRAM stolen on November 9 and 10. The malicious version was removed from PyPI on November 11.

View Source

Disclaimer: This content is for informational purposes only and does not constitute investment advice or encourage the buying or selling of crypto assets. It is intended to provide information about industry developments and is not directly related to the services offered by Gate TR. Although information obtained from third-party sources has been carefully reviewed, Gate TR assumes no responsibility for any errors or omissions. Crypto assets involve high risks and may experience significant price fluctuations. Before making any investment decisions, you should assess your financial situation and risk tolerance, conduct your own research, and make decisions independently.